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EDUCATION,  AND  WELFARE,  GENERAL 
ADMINISTRATION 

PART  5b— PRIVACY  ACT  REGULATION 

A  notice  of  proposed  rulemaking  to 
implement  Section  3  of  the  Privacy  Act 
of  1974,  5  U.S.C.  552a  (hereinaftOT  re¬ 
ferred  to  as  the  Act)  was  published  in 
the  Federal  Register  on  August  14, 1975 
(40  PR  34129) .  The  notice  proposed  pro¬ 
cedures  whereby  individuals  could  avail 
themselves  of  the  provisions  of  the  Act 
which,  among  other  things 

(1)  permit  an  individual  to  determine 
what  records  pertaining  to  him  are 
maintained  in  a  system  of  records  by 
the  Department; 

(2)  permit  an  individual  to  gain  ac¬ 
cess  to  records  pertaining  to  him  in  such 
systems  of  records  and  to  have  copies 
made  of  any  or  all  such  records;  and, 

(3)  permit  an  individual  to  correct  or 
ammd  a  record  pertaining  to  him  in  a 
system  of  records. 

The  notice  also  proposed  procedures 
under  which  the  Department  would  op¬ 
erate  to  cmnply  with  the  provisions  of 
the  Act  mentioned  above  as  well  as  other 
provisions  of  the  Act  which  impose  re¬ 
quirements  on  federal  agencies  with  re¬ 
spect  to  the  manner  in  which  they 
collect,  use,  disseminate  and  otherwise 
maintain  records  which  pertain  to  spe¬ 
cific  individuals. 

Pursuant  to  the  provisions  of  subsec¬ 
tions  (J)  (2)  and  (k)  (4)  of  the  Act,  ex¬ 
emptions  from  certain  provisions  of  the 
Act  were  proposed  for  four  systems  of 
records  maintained  by  the  Department. 
On  September  5,  1975  an  additional  no¬ 
tice  of  proposed  rulemaking  was  pub¬ 
lished  in  the  Federal  Register  (40  FR 
41140)  which  proposed  exemptions  pur¬ 
suant  to  subsections  (j)(2),  (k)(2), 
(k)  (4),  and  (k)  (5)  for  10  other  systems 
of  records. 

Five  comments  were  received  on  the 
August  14,  1975  proposal.  These  ccxn- 
ments  are  from  an  intermediary  and  a 
carrier  which  perform  functions  imder 
contracts  and  agreements  entered  into 
under  §S  1816  and  1842  of  the  Social 
Security  Act,  42  U.S.C.  1395h  and  1395u, 
a  medical  specialty  association  repre¬ 
senting  general  and  family  practitioners, 
a  public  interest  group,  and  a  health 
statistics  consultant.  The  comments  ad¬ 
dress  the  proposed  Inclusion  of  inter¬ 
mediaries  and  carriers  as  a  part  of  the 
Department,  the  proposed  special  proce¬ 
dures  for  medical  records,  the  prohibi¬ 
tion  on  blanket  consents,  and  the  scope 
of  the  proposed  exemption  of  systems  of 
records  required  by  statute  to  be  main¬ 
tained  and  used  solely  as  statistical 
records. 

No  comments  were  received  on  those 
additional  exemptions  proposed  on  Sep¬ 
tember  5,  1975. 

The  comments  and  recommendations, 
and  the  Secretary’s  conclusion  in  light  of 
them,  are  detailed  below. 

Interaction  Between  the  Freedom  or 
Information  Act  and  the  Privacy  Act 

The  Privacy  Act  is  intended  to  prevent 
invasions  of  the  privacy  of  individuals. 


It  permits  an  individual  to  have  some 
control  over  the  accuracy  and  disclosures 
of  records  pertaining  to  him  maintained 
by  federal  agencies. 

On  the  other  hand^  the  Freedom  of 
Information  Act  is  intended  to  permit 
the  general  public  to  be  informed  on  the 
activities  undertaken  by  its  government. 

It  provides  that  all  records  maintained 
by  government  agencies  with  nine  ex¬ 
emptions  are  tq  be  made  available  to  the 
public.  One  of  these  exemptions  is  for 
records  the  disclosure  of  which  would 
constitute  a  clearly  imwarranted  inva¬ 
sion  of  personal  privacy.  Only  in  exercis¬ 
ing  this  exemption  may  agencies  look  to 
the  motives  of  the  requester  and  balance 
his  right  to  know  (or  to  have  the  record 
released  or  made  available  to  him) 
against  the  right  to  privacy  of  the  in¬ 
dividual  to  whom  the  record  pertains. 
The  FreedMn  of  Information  Act  does 
not  protect  the  individual  from  all  in¬ 
vasions  of  privacy  but  only  those  which 
are  clearly  imwarranted. 

The  Privacy  Act  maintains  this  con¬ 
cept  and  does  not  prohibit  disclosure 
without  the  consent  of  the  individual  to 
whom  the  record  pertains  when  the 
record  is  required  to  be  made  available 
under  the  Freedom  of  Information  Act. 

Requests  from  individuals  which  cite 
either  Act  will,  in  general,  be  processed 
according  to  the  provisions  of  the  Act 
cited  and  the  applicable  regulation.  If  a 
request  which  cites  the  Privacy  Act  by 
its  terms  clearly  appears  to  be  a  request 
under  the  Freedom  of  Information  Act 
the  responsible  Department  official  will, 
to  the  extent  practicable,  process  the  re¬ 
quest  or  forward  it  to  the  appropriate 
Freedom  of  Information  Officer.  If  a  re¬ 
quest  cites  the  Freedom  of  Information 
Act  but  by  its  terms  clearly  appears  to  be 
a  request  imder  the  Privacy  Act,  it  will  to 
the  extent  practicable,  be  forwarded  to 
the  appropriate  responsible  Department 
official  for  processing  under  this  Part.  If 
such  a  request  does  not  specify  which 
system  (s)  of  records  the  individual 
wishes  to  be  searched,  he  wUl  be  in¬ 
formed  of  the  procedures  set  forth  in  this 
Part. 

Obmiral  Pouct  and  Format 

It  is  the  p<fficy  of  the  Department  to 
implement  the  Act  in  order  to  provide  in¬ 
dividuals  the  full  benefit  of  the  provisions 
of  the  Act.  This  regulation  seeks  to  strike 
a  balance  between  ease  and  simplicity 
for  individuals  who  seek  notification  and 
access  as  provided  in  the  Act,  and  the 
imposition  of  requirements  designed  to 
prevent  the  disclosure  of  records  to  a 
person  other  than  the  individual  to 
whom  the  record  pertains. 

The  regulaticm  is  designed  to  prescribe 
overall  procedures  to  be  applied  through¬ 
out  the  Department.  Some  components  of 
the  Department,  however,  have  proced¬ 
ures  which  are  mandated  by  other  stat¬ 
utes  e.g.,  correction  or  amendment  of 
wage  earner  records  under  the  Social 
Security  Act,  42  U.S.C.  405(c).  The  reg¬ 
ulation  authorizes  components  of  the 
Department  to  Issue  supplementarv  regu¬ 
lations  in  such  cases  to  comply  with  the 
requirements  of  such  other  statutes.  In 
addition,  components  may  issue  supple¬ 


mentary  regulations  to  meet  particular 
needs  of  programs  administered  by  them. 

The  major  change  from  the  propo^ 
regulation  to  be  noted  is  that  of  the  for¬ 
mat.  In  the  proposed  regulation,  all  of 
the  procedures  for  requesting  notifica¬ 
tion  and  access,  verif3ring  identity,  dis¬ 
closing  records  with  the  consent  of  the 
subject  individuai,  and  the  special  pro¬ 
cedures  regarding  medical  records  were 
found  in  the  same  section.  In  the  final 
recnilation,  these  same  procedures  are  set 
forth  in  several  sections.  Section  5b.5  sets 
forth  all  of  the  requironents  which  must 
be  followed  by  ah  Individual  who  seeks 
notification  or  access  to  records  msdn- 
tained  by  the  Department,  other  than 
medical  records.  Section  5b.6  set  forth 
toe  special  procedures  to  be  followed 
with  respect  to  toe  disclosure  of  medical 
records.  This  section  is  divided  into  two 
parts,  one  governs  requests  by  individu¬ 
als  for  torir  own  mecUcal  records  and  a 
second  governs  requests  by  parents  or 
guardians  for  medical  records  of  minor 
children.  Section  5b.l0  specifies  toe  right 
of  parents  and  guardians  to  act  on  be¬ 
half  of  minors  or  legal  incompetents.  All 
disclosures  to  third  parties  will  be  gov¬ 
erned  by  toe  provisions  of  section  5b.9. 
These  include  disclosures  made  to  third 
parties  with  specific  consent  from  the  in¬ 
dividual  to  whom  toe  record  pertains, 
disclosures  to  officers  and  employees  of 
toe  Department  who  have  a  need  for  toe 
record  in  the  performance  of  their  duties, 
disclosures  required  by  toe  Freedom  of 
]^ormation  Act,  and  those  disclostu'es 
permitted  by  toe  Act  which  are  made 
without  the  specific  consent  of  toe  in¬ 
dividual.  It  is  believed  that  these  distinc¬ 
tions  will  clarify  toe  regulation  and  be 
more  helpful  to  individuals  seeking  noti¬ 
fication  of  or  access  to  records. 

Definitions 

In  addition  to  toe  terms  defined  in  toe 
proposed  regulation,  definitions  of  toe 
terms  “notification”  and  “access”  have 
been  added.  As  in  the  case  of  toe  otoer 
terms,  careful  attention  should  be  given 
to  toe  special  meaning  given  to  toe  terms 
by  this  regulation. 

Two  comments  were  received  objecting 
to  toe  inclusion  in  the  definition  of  “De¬ 
partment”  of  intermediaries  and  carri¬ 
ers  performing  functions  under  contracts 
and  agreements  entered  into  pursuant 
to  sections  1816  and  1842  of  toe  Social 
Security  Act  (42  U.S.C.  1395h  and  1395u) . 
As  a  result  of  these  comments  toe  De¬ 
partment  has  carefully  reexamined  toe 
status  not  (xily  of  intermediaries  and 
carriers,  but  also  otoer  contractors  main¬ 
taining  systems  of  records  on  behalf  of 
toe  Department  who  would  be  subject  to 
toe  provisions  of  toe  Act. 

The  Department  has  determined  that 
Intermediaries  and  carriers  are  agents  of 
toe  Department  (as  well  as  ccmtractors) 
in  carrying  out  Medicare  functions  im¬ 
posed  by  law  on  toe  Secretary  and  by 
reason  of  this  agency  status  are  subject 
to  all  of  toe  urovisions  of  toe  Act.  Accord¬ 
ingly,  toe  final  regulation  specifies  that 
they  are  governed  by  all  problems  of  the 
regulation. 

In  the  performance  of  their  contractual 
undertaking,  the  fiscal  intermediaries  [and 
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the  carriers]  act  on  behalf  of  the  Secretary, 
carrying  on  for  him  the  administrative  re¬ 
sponsibilities  imposed  by  the  law.  The  Sec¬ 
retary,  however,  Is  the  real  party  in  Interest 
and  will  endeavor  to  safeguard  the  interests 
of  his  contractual  representatives  with  re¬ 
spect  to  their  actions  In  the  fulfillment  of 
commitments  under  the  agreements  or  (con¬ 
tracts]  entered  Into  by  him  with  the  Secre¬ 
tary.  [20  CFR  405.651  and  405.670.] 

It  is  on  the  basis  of  these  provisions 
that  suits  filed  by  Medicare  beneficiaries 
in  state  courts  against  intermediaries  and 
carriers  with  respect  to  Medicare  claims 
are  routinely  removed  to  Federal  court 
on  the  ground  that  the  Secretary  (rather 
than  the  intermediaries  and  carriers)  is 
the  real  party  in  interest.  The  Depart¬ 
ment  would  tlierefore  be  remiss  if  it  did 
not  consider  the  intermediaries  and  car¬ 
riers  as  the  Secretary’s  agents  for  the 
purpose  of  the  Privacy  Act.  Furthermore, 
the  Department’s  regulation  under  the 
Freedom  of  Information  Act,  45  CFR, 
Part  5  makes  the  records  of  carriers  and 
intermediaries  performing  Medicare 
functions  subject  to  its  provisions. 

It  was  commented  that  the  cost  of 
compliance  by  the  intermediaries  and 
carriers  with  the  provisions  of  the  Act 
“will  increase  costs  without  a  correspond¬ 
ing  benefit.”  Neither  the  Department  nor 
its  agents  in  administering  the  Medicare 
program  can  be  relieved  of  the  obligation 
to  comply  with  the  Act  because  of  the 
cost  of  compliance. 

The  Department  has  agreed  with  the 
suggestion  that  a  new  section  be  added 
requiring  that  contracts  entered  into  on 
or  after  the  effective  date  of  the  Act  spe¬ 
cifically  include  the  requirements  of  the 
Act  where  applicable.  This  provision  will 
be  found  in  the  new  section  5b.l2  relating 
to  contractors.  The  Department  has  ad¬ 
ditionally  provided  that  cwitracts  which 
were  entered  into  prior  to  September  27 
and  imder  which  work  is  still  being  per¬ 
formed  by  the  contractor  shall  be 
amended,  to  include  the  requirements  of 
the  Act  as  soon  as  practicable  but  no  later 
than  July  1,  1976,  unless  for  good  reason 
this  requirement  is  waived  as  provided  in 
section  5b.l2(b)  of  the  regulation. 

The  Department  also  agrees  with  the 
comment  that  no  contractor  should  be 
designated  as  a  system  manager  in  a 
notice  of  a  system  of  record.  Appropri¬ 
ate  instructions  will  be  issued  to  make 
clear  that  only  a  Department  employee 
will  be  designated  as  a  systems  manager. 

Section  5b.2,  Purpose  and  Scope,  has 
been  amended  to  specify  that  all  em¬ 
ployees  of  the  Department  are  governed 
by  this  regulation.  Employees  include 
regular  government  employees,  special 
government  employees,  members  of  the 
Public  Health  Service  Commissioned 
Corps,  experts  and  consultants,  volun¬ 
teers  where  authorized  by  law.  those 
persons  performing  gratuitous  services  as 
defined  fii  the  Federal  Personnel  Manual 
and  participants  in  work-study  or  train¬ 
ing  programs  authorized  by  law. 

Maintemamci  or  Rbcords 

The  Act  requires  that  agencies  main¬ 
tain  only  those  records  which  are  rele¬ 
vant  and  necessary  to  accomplish  an 
authorized  agency  purpose.  No  agency 


may  collect  information  on  how  an  in¬ 
dividual  exercises  his  First  Amendment 
rights  unless  specifically  authorized  by 
statute  or  the  individual  or  unless  neces¬ 
sary  for  an  authorized  law  enforcement 
activity.  An  individual  providing  infor¬ 
mation  to  the  government  must  be  told 
what  the  agency’s  authority  for  collect¬ 
ing  the  information  is,  wl^  it  is  being 
collected,  whether  he  is  required  to  pro¬ 
vide  the  information,  how  the  agency  is 
going  to  use  the  information  including 
what  disclosures  will  be  made  of  the  in¬ 
formation  without  his  consent  as  routine 
uses,  and  what  effect,  if  any.  his  refusal 
to  provide  the  information  will  have  on 
him. 

These  provisions  are  set  forth  in  sec¬ 
tion  5b.4  of  the  regulation. 

Notification  of  or  Access  to  Records 

The  terms  notification  and  access  are 
defined  in  the  final  regulation  and  sure 
used  to  identify  two  distinct  rights  given 
to  individuals  by  the  Act.  An  individual 
may  request  to  be  notified  whether  a  par¬ 
ticular  system  of  records  identified  by 
him  contains  a  record  pertaining  to  him. 
He  may  also  request  access  to  the  record 
for  the  purpose  of  reviewing  it. 

The  requirements  imposed  on  individ¬ 
uals  who  seek  notification  or  access  are 
designed  to  protect  their  privacy.  In  or¬ 
der  to  avoid  excessive  delay  and  ex¬ 
changes  of  correspondence,  individuals 
are  encouraged  to  request  both  notifica¬ 
tion  and  access  at  the  same  time,  if  they 
are  likely  to  request  access  once  they 
have  received  positive  notification. 

In  general,  an  individual  will  not  be 
required  to  vertify  his  identity  when 
making  a  request  for  notification  only. 
However,  if  disclosure  to  a  third  party 
of  the  mere  existence  of  a  record  would 
constitute  ^  clearly  unwarranted  inva¬ 
sion  of  privacy,  the  requester  will  be 
required  to  verify  his  identity. 

An  Individual  requesting  access  to  a 
record  will  be  required  to  verify  his  iden¬ 
tity  unless  Ihe  record  is  required  to  be 
disclosed  under  the  Freedom  of  Informa¬ 
tion  Act.  Parents  or  legal  guardians  will 
have  to  verify  both  their  identity  and 
their  relationship  to  the  minor  or  legal 
incompetent. 

Where  an  individual  cannot  verify  his 
identity  in  person  independently,  he  may 
certify  in  writing  that  he  is  the  person 
he  claims  to  be  and  that  he  understands 
that  the  knowing  and  willful  request  for 
or  acquisition  of  a  record  pertaining  to 
an  individual  under  false  pretenses  is  a 
criminal  offense  subject  to  a  $5,000  fine. 
Mailed  requests  must  contain  the  same 
certification  or  be  notarized.  A  greater 
degree  of  verification  may  be  required 
on  sensitive  records  such  as  medical  rec¬ 
ords.  Telephone  requests  will  be  honored 
only  with  respect  to  non-sensitive  rec¬ 
ords  and  only  if  the  requester  provides 
sufficient  identifying  particulars  to  ver¬ 
ify  his  identity  to  the  satisfaction  of  the 
responsible  Department  official. 

Special  Procedures  for  Medical  Records 

As  authorized  under  subsection  (f )  (3) 
of  the  Act,  agencies  are  permitted  to  es¬ 
tablish  special  procedures  for  notification 
of  or  access  to  medical  records,  including 


psychological  records.  Under  this  author¬ 
ity,  the  proposed  regulation  established 
such  special  procedures.  The  procedures 
for  notification  of  ot  access  to  medical 
records  has  hot  been  changed  significant¬ 
ly  in  the  final  regulation.  There  are  two 
procedures  governing  notification  of  or 
access  to  procedure  for  records  of  minors. 

A  minor  not  represented  by  a  parent  or 
guardian  may,  however,  request  notifica¬ 
tion  of  or  access  to  his  own  medical  rec¬ 
ord  under  the  procedure  for  adults. 

The  procedure  governing  notification 
of  or  access  to  medical  records  of  adults 
may  not  be  suitable  for  use  by  every 
component  of  the  Department.  Accord¬ 
ingly,  the  regulation  specifies  that  sup¬ 
plementary  regulations  may  be  Issued  by 
the  various  components  with  respect  to 
this  procedure,  tailored  to  the  particular 
program  needs  of  the  component.  The 
procedure  governing  medical  records  of 
minors,  is,  however,  mandatory.  There 
are  no  particular  program  needs  which 
would  justify  authorizing  any  component 
to  depart  from  the  special  safeguards  es¬ 
tablished  in  the  reg^ation  for  the  med¬ 
ical  records  of  minors. 

Under  the  procedure  for  records  of 
adults,  an  individual  will  be  required  to 
designate  a  representative  at  the  time  he 
makes  a  request  for  notification  of  or 
access  to  medical  records.  The  represent¬ 
ative  may  be  the  individual’s  physician, 
other  health  professional,  or  another 
responsible  individual.  If,  after  consulta¬ 
tion  with  a  physician,  if  one  is  available 
at  the  location  of  the  records,  the  respon¬ 
sible  Department  official  determines  that 
direct  access  to  the  individual  is  likely  to 
have  an  adverse  effect  on  him,  or  if  the 
responsible  Department  official  does  not 
believe  himself  qualified  to  make  such  a 
determination,  the  record  will  be  trans¬ 
mitted  to  the  designated  representative. 
If  the  responsible  Department  official  de¬ 
termines  that  direct  access  is  not  likely 
to  have  an  adverse  effect  on  an  the  indi¬ 
vidual,  he  may  transmit  the  record  di¬ 
rectly  to  the  individual  to  whom  the  rec¬ 
ord  pertains. 

The  Department  recognizes  that  the 
privacy  of  the  minor  may  be  invaded  by 
granting  a  parent  or  guardian  direct  no¬ 
tification  or  access  to  the  medical  rec¬ 
ords  of  a  minor.  Minors  are  permitted  to 
receive  medical  treatment  for  various 
conditions  without  parental  consent.  The 
extent  to  which  such  treatment  is  avail- 
ables  varies  according  to  state  law.  The 
benefits  achieved  by  permitting  such 
treatment  without  the  consent  of  a  par¬ 
ent  or  guardian  would  be  destroyed  if  the 
parent  or  guardian  could,  at  a  subsequent 
time,  obtain  access  to  the  record  of  such 
treatment.  A  minor  would  be  reluctant  to 
seek  out  such  treatment  if  he  knew  that 
his  parents  or  guardian  would  later  be 
able  to  obtain  the  specifics  of  the  treat¬ 
ment  he  received.  Therefore  the  Depart¬ 
ment  has  prescribed  a  special  proc^ure 
for  disclosure  of  the  medical  records  per¬ 
taining  to  minors. 

Under  the  procedure  for  records  of  mi¬ 
nors.  the  parent  or  guardian  of  a  minor 
may  make  requests  for  notification  of  or 
access  to  the  medical  records  of  the  minor 
on  the  behalf  of  the  minor.  However,  a 
parent  or  guardian  will  not  be  granted 
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direct  access  to  the  medical  record  of  a 
minor.  A  parent  or  guardian  will  be  re¬ 
quired  to  designate  a  phsnsician,  or  other 
health  professional,  at  the  time  he  makes 
the  request,  to  whom  the  record  will  be 
sent.  The  designee  will  be  alerted  to  the 
fact  that  the  medical  record  may  be  sen¬ 
sitive  and  he  will  be  requested  to  consider 
the  effect  that  the  disclosure  of  the  en¬ 
tire  record  to  a  parent  or  guardian  would 
have  on  the  minor.  Because  it  is  possible 
that  a  positive  response  to  a  request  for 
notification  of  a  specific  system  of  rec¬ 
ords  may  in  itself  be  an  invasion  of  pri¬ 
vacy,  a  parent  or  guardian  requesting  no¬ 
tification  of  or  access  to  a  medical  record 
of  a  minor  will  be  advised  that  if  any 
such  record  was  foimd  it  has  been  sent  to 
the  designated  health  professional. 

For  example,  it  is  conceivable  that  the 
Department  might  have  a  system  of  rec¬ 
ords  entitled,  “treatment  for  drug  addic¬ 
tion”  which  includes  records  on  identi¬ 
fied  minors  who  have  received  treatment 
for  drug  addiction  without  parental  con¬ 
sent.  If  a  responsible  Department  official 
were  to  respond  to  a  request  for  notifica¬ 
tion  from  a  parent  or  guardian  that  a 
record  on  the  subject  minor  had  been 
identified  from  this  record  system  and 
transmitted  to  the  designated  health  pro¬ 
fessional.  the  privacy  of  the  minor  would 
be  invad^  notwithstanding  the  fact  that 
direct  access  to  the  record  is  not  granted. 
Therefore,  a  responsible  Department  of¬ 
ficial  will  reply  in  a  manner  which  does 
not  inform  the  parent  or  guardian 
whether  a  record  has  in  fact  been  iden¬ 
tified.  Siiggested  language  is  included 
in  the  regvdation  for  this  purpose.  It  is 
hoped  that  the  designated  health  pro¬ 
fessional  will  cooperate  with  the  Depart¬ 
ment  and  not  disclose  a  record  Which 
could  result  in  harm  to  the  minor. 

Two  comments  referred  to  the  speclcd 
procedures  for  medical  records.  One  sug¬ 
gested  that  an  individual  should  only 
be  permitted  to  designate  his  current 
physician  or  the  physician  who  created 
the  record  to  be  the  representative,  ex¬ 
cept  imder  extraordinary  circumstances. 
Such  a  restriction  is  said  to  be  in  the  best 
interest  of  the  individual  since  such 
physicians  would  be  best  able  to  evaluate 
the  effect  that  access  to  the  record  would 
have  on  the  individual. 

While  it  is  desirable  to  grant  access 
to  medical  records  through  a  family 
physician  or  the  physician  who  created 
the  record,  it  would  not  always  be  feasi¬ 
ble  or  imacticable  to  do  so.  and  at  times 
might  result  in  an  undue  financial  bur- 
dm  for  the  requester.  For  this  reason, 
the  regulation  offers  flexibility  to  the 
requester  in  choosing  a  representative. 

It  is  also  suggested  that  the  designated 
rQiresentative  be  advised  to  disclose  only 
that  Information  which  would  not  be 
likely  to  have  an  adverse  effect  on  the 
individual  and  withhold  any  Information 
which  would  be  likely  tQ_have  an  adverse 
effect  on  the  individual.  The  Department 
bdleves  that  in  general  it  is  not  apinn- 
inlate  to  regulate  the  extent  to  which 
the  representative  should  disclose  infor¬ 
mation  from  the  record.  Such  advice 
would  not  bind  the  representative  in  any 
way.  Furthendore,  if  the  regulation  in¬ 


cluded  language  as  suggested,  an  indi¬ 
vidual  may  suspect  that  the  representa¬ 
tive  hsud  been  less  than  candid  with  him 
by  vdthholding  a  portion  of  the  record. 

Both  comments  generally  favored  the 
proposed  procedures  for  access  to  medi¬ 
cal  records  pertaining  to  minors.  One 
suggested  definhig  minors  and  setting 
an  upper  level  at  18  years  of  age.  The 
other  suggested  setting  a  lower  level, 
which  would  permit  direct  access  to  par¬ 
ents  or  guardians  to  the  medical  records 
of  minors  below  the  age  of  12. 

The  Department  agrees  that  it  is  de¬ 
sirable  to  define  the  term  “minor”  in  the 
final  regulation.  However,  because  the 
age  of  consent  to  medical  treatment  and 
the  age  of  majority  varies  from  state  to 
state,  it  is  impracticable  to  develop  a 
satisfactory  definition  of  this  term. 

One  of  these  comments  also  recom¬ 
mended  that  the  regulation  prohibit  the 
representative  from  disclosing  to  the 
parent  or  guardian  information  regard¬ 
ing  any  medical  treatment  of  a  minor  in 
cases  of  abortion,  pregnancy,  contracep¬ 
tion,  venereal  di^ase,  alcohol,  drug  a^ 
narcotic  abuse  or  addiction.  The  D^>art- 
ment  agrees  that  the  minor’s  privacy 
should  be  protected  with  respect  to  treat¬ 
ment  in  these  sensitive  areas.  The  De¬ 
partment,  however,  is  reluctant  to 
impose  such  strictures  on  health  profes¬ 
sionals,  believing  that  whether  informa¬ 
tion  regarding  medical  treatment  in 
these  areas  should  be  disclosed  to  the 
parent  or  guardian  should  be  left  to  the 
sound  Judgment  of  the  health  profes¬ 
sional  on  the  basis  of  the  circumstances 
of  each  case. 

It  was  additionally  suggested  that  the 
term  “health  professional”  be  defined  as 
used  in  both  the  procedure  governing 
medical  records  of  adults  and  the  pro¬ 
cedure  governing  medical  records  of 
minors.  While  it  is  also  desirable  to  de¬ 
fine  this  term,  it  is  not  feasible  to  include 
all  of  the  possible  disciplines  within  one 
definition.  A  partial  definltbm  would 
only  create  ambiguity  and  perhaps  ex¬ 
clude  a  professional  who  could  otherwise 
be  ainiropriately  consulted. 

Correction  or  Amendment  or  Records 

The  Act  provides  that  an  individual 
may  request  that  ageacles  correct  or 
amend  records  which  they  maintain  if 
the  individual  believes  that  the  record 
is  not  accurate,  relevant,  timely,  or  com¬ 
plete.  Section  5b.7  sets  forth  the  proce¬ 
dures  by  which  an  individual  may  se^ 
correction  or  amendment  An  individual 
who  seeks  correction  or  amendment  of  a 
record  must  direct  a  request  to  that  ef¬ 
fect  to  the  respcmsible  Department 
cial  named  in  the  ^ippnvriate  system 
notice.  The  request  should  specify  exact¬ 
ly  what  changes  are  desired  and  explain 
why  the  record  is  Inaccurate,  irrelevant 
untimely,  or  inconmlete.  Should  the  re¬ 
sponsible  Department  official  refuse  to 
correct  or  amend  the  record,  the  indi¬ 
vidual  may  appeal  the  refusal  to  higher 
authority.  The  aiH>eel  authorities  are 
those  officials  who  also  have  the  respon¬ 
sibility  to  review  appeals  of  denials  under 
the  Freedom  of  Informatimi  Act  or  th^ 
designees.  Provision  is  made  t^t  no  of¬ 


ficial  may  review  his  own  refusal  to 
amend  or  correct  a  record. 

If  an  appeal  is  denied,  the  individual 
may  submit  a  statement  of  disagreement 
which  will  be  associated  with  the  dis¬ 
puted  record  and  disclosed  whenever  the 
record  is  disclosed.  Such  statement  must 
also  be  transmitted  to  those  persons  or 
organisations  who  have  previously  re¬ 
ceived  the  record,  accord^  to  the  ac- 
coimting  maintained  pursuant  to  the 
Act. 

Disclosure  of  Records 

An  individual  may  grant  consent  to 
the  disclosure  to  third  parties  of  records 
pertaining  to  him.  The  regulation  pro¬ 
vides  that  the  consent  must  be  specific 
with  respect  to  which  record  may  be  dis¬ 
closed,  to  whom  it  may  be  disclosed,  and 
during  what  time  frtune  it  may  be  dis¬ 
closed.  No  blanket  consent  documents 
will  be  honored.  One  comment  strongly 
supported  this  position  and  also  sug¬ 
gested  that  a  consent  to  the  disclosure 
of  medical  information  be  honored  only 
if  it  is  executed  not  more  than  45  days 
prior  to  the  third  party’s  request  for  ac¬ 
cess  to  the  record.  The  Department  be¬ 
lieves  that  the  requirement  that  a  time 
frame  be  included  in  the  consent  docu¬ 
ment  is  sufficient  to  protect  against  un¬ 
timely  disclosures. 

The  Act  also  provides  that  certain  lim¬ 
ited  disclosures  of  a  record  may  be  made 
without  the  consent  of  the  individual  to 
whom  it  pertains.  For  the  information  of 
the  public,  the  conditions  of  such  disclo¬ 
sures  are  set  forth  in  the  regulation. 

An  accounting  of  most  disclosures  must 
be  made.  The  accoimting  will  contain  the 
date,  nature  and  purpose  of  the  disclo¬ 
sure.  as  well  as  the  name  and  address  of 
the  recipient  of  the  record.  In  most  in¬ 
stances  it  will  be  made  available  to  the 
individual  to  whom  the  record  pertains 
upon  his  request.  Where  a  disclosure  may 
consist  of  a  continuing  exchange  between 
the  Department  and  a  third  party  over  a 
period  of  time,  as  in  an  investigation  of 
criminal  activity,  or  a  continuing  re¬ 
search  project,  it  is  sufficient  to  make  a 
general  notation  that,  as  of  a  specified 
date,  such  contact  was  initiated  and  will 
be  maintained  imtil  the  conclusion  of  the 
case  or  project.  In  each  such  case  the 
responsible  Department  official  will  also 
note  when  continuing  contact  is  con¬ 
cluded.  The  Department  will  retain  the 
accounting  made  for  at  least  five  years 
or  the  life  of  the  record,  whichever  is 
longer,  after  the  disclosure  for  which  the 
accounting  is  made.  As  discussed  in  the 
notice  of  proposed  rule  mak^,  the  De¬ 
partment  will  not  require  an  account¬ 
ing  (ff  the  granting  of  access  to  the  in¬ 
dividual  or  of  disclosures  to  third  pexties 
made  with  his  consent. 

One  comment  suggested  that  the  pro¬ 
visions  of  the  proposed  section  5b.7(a)  (5) 
(now  5b.9(b)  (5) )  were  not  sufficient  to 
protect  identifiable  records  which  were 
collected  for  statistical  piuposes  from 
being  used  within  the  agency  for  pur¬ 
poses  otho-  than  for  the  purposes  for 
which  it  was  created.  The  Department 
believes  that  the  provision  of  section  5b.9 
(b)  (1) ,  which  permits  a  responsible  De¬ 
partment  official  to  determine  what  con- 
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stitutes  legitimate  "need”  under  the  Act 
(which  authorizes  disclosure  to  em¬ 
ployees  of  the  Department  who  have  a 
"need”  for  the  record),  is  sufficient  to 
prefvent  the  potential  abuses  envisioned 
by  the  comment. 

Exkmpt  Ststocs 

The  four  exemptions  which  were  pro¬ 
posed  in  section  5b.9  of  the  proposed  reg¬ 
ulation  published  in  the  Federal  Register 
on  August  14,  1975  and  the  ten  other 
exemptions  adiich  were  proposed  in  a 
notice  published  in  the  Federal  Register 
on  September  5, 1975  are  included  as  final 
exemptions  in  section  5b.ll  of  this  reg¬ 
ulation.  As  was  noted  in  the  preambles  of 
these  two  proposals,  the  exemptions  are 
necessary  to  assure:  continued  and  un¬ 
interrupted  activity  in  the  area  of  health 
services  statistical  research  and  the  con¬ 
tinued  cooperation  of  the  sources  of  such 
statistical  information;  the  orderly  and 
unbiased  conduct  of  law  enforcement  in¬ 
vestigations,  and  that  efforts  by  the 
Department  to  obtain  accurate  and 
objective  Information  r^tbig  to  an  in¬ 
dividual’s  suitability  and  eligibility  for 
Department  employment  will  not  be  prej¬ 
udiced  (40  FR  34130-34131, 40  FR  41141) 

Two  substantive  changes  have  been 
made.  As  proposed  the  fourteen  systems 
of  records  were  exempted  from  all  of 
those  requirements  oP  the  Act  authorized 
by  subsections  (J)  and  (k).  1710  Depart¬ 
ment  has  determined,  however,  that  it  is 
necessary  to  exempt  these  systems  of 
records  only  from  the  notification  and 
access  and  correction  and  amendment 
provisions  of  the  Act  and  this  regulation. 
It  was  also  determined  that  criminal  law 
enforcement  systems  of  records  exempt 
under  subsection  (j)  (2)  of  the  Act  nded 
only  be  additionally  exempted  from  sub¬ 
section  (e)  (3)  of  the  Act  .(requiring 
agencies  to  inform  individuals  whom  it 
asks  to  provide  a  record,  including  the 
authority  for  providing  the  record, 
whether  providing  the  record  is  manda¬ 
tory  or  volimtary,  the  principal  purpose 
for  maintaining  the  record,  etc.)  to  the 
extent  that  subsection  (e)(3)  requlre- 
*  ments  would  prejudice  Uie  conduct  of  a 
criminal  investigation. 

A  provision  was  also  added  in  the  final 
regulation  to  authorize  re^nsible  De¬ 
partment  officials  at  their  discretion  to 
grant  notification  of  or  access  to  a  record 
in  a  system  of  records  exempt  from  the 
notification  and  access  provlsi(ms  of  the 
Act  and  this  regulation.  This  provision 
was  added  to  enable  a  responsible  De¬ 
partment  official  to  exercise  his  discre¬ 
tion  and  grant  notification  of  or  access  to 
a  record  in  an  exempt  system  of  records 
after,  fmr  example,  a  law  enforcement 
investigation  and  proceeding  has  ended 
if  he  believes  that  it  is  no  longer  neces¬ 
sary  to  restrict  access  to  the  record  to 
the  subject  individual. 

It  is  emphasized,  however,  that  dlscre- 
ticmary  notification  of  or  access  to  a  rec¬ 
ord  in  an  exmpt  system  will  not  be  a 
precedent  for  discretkmary  notification 
of  or  access  to  a  similar  or  related  record 
and  will  not  obligate  the  responsible  De¬ 
partment  official  to  exercise  ^  discretion 
to  grant  notification  of  or  access  to  any 


other  record  in  a  system  of  records  which 
is  exempt  (mder  section  5b.ll. 

It  is  also  noted  that  the  Food  and 
Drug  Administration  system  of  records, 
“employee,  consultant,  contractor  se¬ 
curity  and  investigative  records,”  pro¬ 
posed  to  be  exempted  in  the  September  5 
notice  is  divided  into  two  separate  sys¬ 
tems  of  records  in  section  5b.ll  of  this 
regulation.  These  systems  are  entitled; 
“the  Emplo3ree  Conduct  Investigative 
Records.  HEW/FDA,”  and  the  “Service 
Conteactor  Employee  Investigative  Rec¬ 
ords,  HEW/FDA",  and  are  divided  to  in¬ 
dicate  more  clearly  the  specific  types  of 
records  Included  in  systems  of  records 
maintained  by  the  F<^  and  Drug  Ad¬ 
ministration. 

Appendix  A 

The  Department  has  deleted  the  in¬ 
ternal  procedures  set  forth  in  the  pro¬ 
posed  Appendix  A,  with  >  the  exception  of 
Employee  Standards  of  Conduct.  Such 
procedures  will  be  published  in  internal 
Department  manuals.  When  published 
such  manual  material  wiU  be  available  to 
interested  persons  for  inspection  and 
copying  pursuant  to  the  Freedom  of  In¬ 
formation  Act  The  Employee  Standards 
of  Conduct  have  been  adopted  as  pro¬ 
posed  with  minor  editorial  changes. 

In  consideration  of  the  foregoing  and 
with  the  changes  and  additions  noted 
above,  the  proposed  rulemaking  add^ 
a  new  Part  5b  to  subtitle  A  of  title  45 
is  adopted  as  set  forth  below. 

Effective  date.  This  regulation  is  effec¬ 
tive  immediately  on  October  8,  1975. 

Dated:  September  30, 1975. 

David  Mathews, 
Secretary. 
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§  5b.l  Definitkms. 

As  used  in  this  Part: 

(a)  “Accms”  means  availability  of  a 
record  to  a  subject  individuaL 

(b)  “Agency”  means  the  Department 
of  Health,  Education,  and  Welfare. 

(c)  “Department^  means  the  Depart¬ 
ment  ot  Health,  Education,  and  Welfare. 

(d)  “Disclosure”  means  the  avail¬ 
ability  or  release  of  a  record  to  anyone 
other  than  the  subject  individual. 

(e)  “Individual”  means  a  living  person 
who  is  a  citizen  of  the  United  States  or 
or  alien  lawfully  admitted  for  permanent 


residence.  It  does  not  include  persons 
such  as  sole  proprietorships,  partner¬ 
ships,  or  corporations.  A  business  firm 
which  is  identified  by  the  name  of  one 
or  more  persons  is  not  an  individual 
within  the  meaning  of  this  Part. 

(f)  “Maintain”  means  to  maintain, 
collect,  use,  or  disseminate  when  used  in 
connection  with  the  term  “record”;  and. 
to  have  control  over  or  responsibility  for 
a  syston  of  records  when  used  in  con¬ 
nection  with  the  term  “system  of 
records.” 

(g)  “Notification”  means  (xxnmunica- 
tion  to  an  individual  whether  he  is  a  sub¬ 
ject  individual. 

(h)  “Record”  means  any  item,  collec¬ 
tion.  or  grouping  of  information  about 
an  individual  that  is  maintained  by  the 
Department.  Including  but  not  limited  to 
the  Individual’s  education,  financial 
transactions,  medical  history,  and  crimi¬ 
nal  or  emplo3rment  history  and  that  con¬ 
tains  his  name,  or  an  identifying  number, 
symbol,  or  other  identifying  particular 
assigned  to  the  Individual,  such  as  a 
finger  or  voice  print  or  a  photograph. 
When  used  in  this  Part,  record  means 
only  a  record  which  is  in  a  system  of 
records. 

(i)  “Responsible  Department  official” 
means  that  officer  who  is  listed  in  a  no¬ 
tice  of  a  system  of  records  as  the  system 
manager  for  a  given  system  of  records 
or  another  individual  listed  in  the  notice 
of  a  system  of  records  to  whcMn  requests 
may  be  made,  or  the  designee  of  either 
such  officer  or  Individual. 

(J)  “Routine  use”  means  the  disclosure 
of  a  record  outside  the  Department, 
without  the  consent  of  the  subject  in¬ 
dividual,  for  a  piuixise  which  is  compat¬ 
ible  with  the  purpose  for  which  the  rec¬ 
ord  was  collected.  It  includes  disclosures 
required  to  be  made  by  statute  other 
than  the  Freedom  of  Information  Act, 
5  UH.C.  552.  It  does  not  include  dis¬ 
closures  which  are  permitted  to  be  made 
without  the  consent  of  the  subject  in¬ 
dividual  which  are  not  compatible  with 
the  purpose  for  which  it  was  collected 
such  as  disclosures  to  the  Bureau  of 
the  Census,  the  General  Accoxmting  Of¬ 
fice.  or  to  Congress. 

(k)  “Secretary”  means  the  Secretary 
of  Health,  Education,  and  Welfare,  or  his 
designee. 

(l)  “Statistical  record”  means  a  rec¬ 
ord  maintained  for  statistical  research 
or  reporting  purposes  only  and  not  main¬ 
tained  to  make  determinations  about  a 
particular  subject  individual. 

(m)  “Subject  individual”  means  that 
individual  to  whan  a  record  pertains. 

(n)  “System  of  records”  means  any 
group  of  records  under  the  control  of  the 
Department  from  which  a  record  is  re¬ 
trieved  by  personal  identifier  such  as  the 
name  of  the  individual,  number,  ssrmbol 
or  other  unique  retriever  assigned  to  the 
todividual.  Single  records  or  groups  of 
records  whidi  are  not  retrieved  by  a  per¬ 
sonal  identifier  are  not  part  of  a  system 
of  records.  Piq>ers  maintained  by  indivld- 
lul  emplosrees  of  the  Department  which 
are  prepared,  maintain^,  or  discarded 
at  the  discretion  of  the  employee  and 
which  are  not  subject  to  the  Federal  Rec- 
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ords  Act,  44  U.S.C.  2901,  are  not  part  of 
a  system  of  records;  provided,  that  such 
personal  papers  are  not  used  by  the  em¬ 
ployee  or  the  Department  to  determine 
any  rights,  benefits,  or  privileges  of  in¬ 
dividuals. 

§  5b.2  Purpose  and  scope. 

(a)  This  Part  implements  section  3 
of  the  Privacy  Act  of  1974,  5  U.S.C.  552a 
(hereinafter  referred  to  as  the  Act),  by 
establishing  agency  policies  and  proce¬ 
dures  for  the  maintenance  of  records. 
Hiis  Part  also  establishes  agency  policies 
and  procedures  under  which  a  subject 
individual  may  be  given  notification  of  or 
access  to  a  record  pertaining  to  him  and 
policies  and  procedures  imder  which  a 
subject  individual  may  have  his  record 
corrected  or  amended  if  he  believes  that 
his  record  is  not  accurate,  timely,  com¬ 
plete,  or  relevant  or  necessary  to  accom¬ 
plish  a  Department  function. 

(b)  All  components  of  the  Department 
are  governed  by  the  provisions  of  this 
Part.  Also  governed  by  the  provisions  of 
this  Part  are: 

(1)  Certain  non-federal  entities  which 
operate  as  agents  of  the  Department  for 
purposes  of  carrying  out  Federal  fimc- 
tions,  such  as  intermediaries  and  car¬ 
riers  performing  fimctions  under  con¬ 
tracts  and  agreements  entered  into  pur¬ 
suant  to  sections  1816  and  1842  of  the 
Social  Security  Act,  42  U.S.C.  1395h  and 
1395U. 

(2)  Advisory  committees  and  coimcils 
within  the  meaning  of  the  Federal  Ad¬ 
visory  Committee  Act  which  provide  ad¬ 
vice  to  <i)  any  official  or  component  of 
the  Department  or  (ii)  the  President  and 
for  which  the  Department  has  been  dele¬ 
gated  responsibility  for  providing  serv¬ 
ices. 

(c)  Employees  of  the  Department  gov- 
«ned  by  this  Part  include  all  regular 
and  spMial  government  employees  of  the 
Department;  members  of  the  Public 
Health  Service  Commissioned  Corps;  ex¬ 
peats  and  consultants  whose  temporary 
(not  in  excess  of  1  year)  or  intermittent 
services  have  been  procured  by  the  De¬ 
partment  by  contract  pursuant  to  3109  of 
title  5,  United  States  Code;  volunteers 
\^ere  acceptance  their  services  are 
authorized  by  law;  those  individuals  per¬ 
forming  gratuitous  services  as  permit¬ 
ted  under  conditions  prescribed  by  the 
Civil  Service  Commission;  and,  partici¬ 
pants  in  work-study  or  training  pro¬ 
grams. 

(d)  Where  other  statutes  mandate 
procedures  whidi  are  inconsistent  with 
the  procedures  set  forth  in  this  Part, 
components  of  the  Department  may  issue 
supplementary  regulations  containing 
procures  necessary  to  comply  with 
such  statutes.  In  addition,  components 
of  the  Department  may  supplement  by 
regulation  the  pc^es  and  procedures 
set  forth  in  this  Part  to  meet  particiilar 
needs  of  the  programs  administered  by 
simh  components. 

(e)  This  Part  does  not: 

(1)  Make  available  to  a  subject  indi¬ 
vidual  records  which  are  not  retrieved 
by  that  individual’s  name  or  other  per¬ 
sonal  identifler. 


(2)  Make  available  to  the  general  pub¬ 
lic  records  which  are  retrieved  by  a  sub¬ 
ject  individual’s  name  or  other  personal 
identifier  or  make  available  to  the  gen¬ 
eral  public  records  which  would  other¬ 
wise  not  be  available  to  the  general  public 
under  the  Freedom  of  Information  Act, 

5  U.S.C.  552,  and  Part  5  of  this  title. 

(3)  Govern  the  maintenance  or  dis¬ 
closure  of,  notification  of  or  access  to, 
records  in  the  possession  of  the  Depart¬ 
ment  which  are  subject  to  regulations  of 
another  agency,  such  as  personnel  rec¬ 
ords  subject  to  the  regulations  of  the 
Civil  Service  Commission. 

(4)  Apply  to  grantees,  including  State 
and  local  governments  or  subdivisions 
thereof,  administering  federally  funded 
programs. 

(5)  Make  available  records  compiled 
by  the  Department  in  reasonable  antici¬ 
pation  of  court  litigation  or  formal  ad¬ 
ministrative  proceedings.  The  availabil¬ 
ity  of  such  records  to  the  general  public 
or  to  any  subject  individual  or  party  to 
such  litigation  or  proceedings  shall  be 
governed  by  applicable  constitutional 
principles,  rules  of  discovery,  and  appli¬ 
cable  regulations  of  the  Department  and 
any  of  its  ccHnponents. 

§  5b.3  Policy. 

It  is  the  policy  of  the  Department  to 
protect  the  privacy  of  individuals  to  the 
fullest  extent  possible  while  nonetheless 
permitting  the  exchange  of  records  re¬ 
quired  to  fulfill  the  administrative  and 
program  responsibilities  of  the  Depart¬ 
ment,  and  responsibilities  of  the  Depart¬ 
ment  for  disclosing  records  which  the 
general  public  is  entitled  to  have  imder 
the  Freedwn  of  Information  Act,  5TJ.S.C. 
552,  and  Part  5  of  this  title. 

§  5b.4  Maintenance  of  records. 

(a)  No  record  will  be  maintained  by 
the  Department  unless: 

(1)  it' is  relevant  and  necessary  to  ac¬ 
complish  a  Department  function  re¬ 
quired  to  be  accomidished  hy  statute  or 
^ecutive  Order; 

(2)  it  is  acquired  to  the  greatest  extent 
practicable  fnnn  the  subject  individual 
when  maintenance  of  the  record  may 
result  in  a  determination  about  the  sub¬ 
ject  individual’s  rights,  benefits  or  privi¬ 
leges  under  Federal  programs; 

(3)  the  individual  providing  the  record 
is  informed  of  the  authority  fm*  provid¬ 
ing  the  record  (including  whether  the 
providbig  of  the  record  is  mandatory  or 
voluntary,  the  pihicipal  purpose  for 
maintaining  the  record,  the  routine  uses 
fOT  the  record,  what  ^ect  his  refusal 
to  provide  the  recwd  may  have  on  him) , 
and  if  the  record  is  not  required  by  stat¬ 
ute  or  Executive  Order  to  be  provided  by 
the  individual,  he  agrees  to  provide  the 
record. 

(b)  No  rec(ud  will.be  maintained  by 
the  Department  whidi  describes  how  an 
individual  exercises  rights  guaranteed  by 
tile  First  Amoidmaxt  unless  exixess^ 
authorised  (1)  by  statute,  or  (2)  by  the 
subject  individual,  or  (3)  unless  perti¬ 
nent  to  and  within  the  scope  of  an  au¬ 
thorized  law  oiforcemait  activity. 


§  5b.5  Notification  of  or  access  to  rec¬ 
ords. 

(a)  Times,  places,  and  manner  of  re¬ 
questing  notification  of  or  access  to  a 
record. 

(1)  Subject  to  the  provisions  govern¬ 
ing  medical  records  in  §  5b.6  of  this  part, 
any  individual  may  request  notification 
of  a  record.  He  may  at  the  same  time 
request  access  to  any  record  pertaining 
to  him.  An  individual  may  be  accom¬ 
panied  by  another  individual  of  his 
choice  when  he  requests  access  to  a  rec¬ 
ord  in  i>erson;  Provided.  That  he  affirma¬ 
tively  authorizes  the  presence  of  such 
other  individual  diming  any  discussion 
of  a  record  to  which  access  is  requested. 

(2)  An  individual  making  a  request  for 
notification  of  or  access  to  a  record  shall 
address  his  request  to  the  responsible 
Department  official  and  shall  verify  his 
identity  when  required  in  accordance 
with  paragraph  (b)  (2)  of  this  section. 
At  the  time  the  request  is  made,  the  in¬ 
dividual  shall  specify  which  systems  of 
records  he  wishes  to  have  searched  and 
the  records  to  which  he  wishes  to  have 
access.  He  may  also  request  that  copies 
be  made  of  all  or  any  such  records.  An 
individual  shall  also  provide  the  respon¬ 
sible  Department  official  with  sufficient 
particulars  to  enable  such  official  to  dis¬ 
tinguish  between  records  cm  subject  in¬ 
dividuals  with  the  same  name.  The  nec¬ 
essary  particulars  are  set  forth  in  the 
notices  of  systems  of  records. 

(3)  An  individual  who  makes  a  request 
in  person  may  leave  with  any  responsi¬ 
ble  Department  official  a  request  for  no¬ 
tification  of  or  access  to  a  record  under 
the  control  of  another  respcmsible  De¬ 
partment  official;  Provided,  That  the 
request  is  addressed  in  writing  to  the 
appropriate  responsible  Department 
official. 

(b)  Verification  of  identity — (1)  When 
require.  Unless  an  individual,  who  is 
making  a  request  for  notiflcaticm  of  or 
access  to  a  record  in  person,  is  personally 
known  to  the  responsible  Department  of¬ 
ficial,  he  shall  be  required  to  v^y  his 
identity  in  accordance  with  paragraph 
(b)  (2)  of  this  section  if: 

(1)  he  makes  a  request  for  notification 
of  a  record  and  the  responsible  Depart- 
mmt  official  determines  that  the  mere 
disclosure  of  the  existence  of  the  record 
would  be  a  clearly  unwarranted  invasion 
of  privacy  disclosed  to  someone  other 
than  the  subject  individual;  or, 

(ii)  he  makes  a  request  for  access  to 
a  record  vdiich  is  not  required  to  be  dis¬ 
closed  to  the  general  pthlic  under  the 
Freedom  of  Information  Act,  5  UJ3.C. 
552,  and  Part  5  of  this  title. 

(2)  Manner  of  verifying  identity. 

(i)  An  individual  who  makes  a  request 
in  person  shall  provide  to  the  responsible 
D^)artment  official  at  least  one  piece  od 
tangible  identification  such  as  a  driver’s 
Ucense,  pasqxnt,  alien  or  voter  registra¬ 
tion  card,  or  union  card  to  voify  his 
identity.  If  an  individual  does  not  have 
identification  piuiers  to  verify  his  iden¬ 
tity,  he  shall  certify  in  writing  that  he 
is  tte  individual  ^o  he  chiims  to  be  and 
that  he  understaixls  that  the  knowhig 
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and  willful  request  for  or  acquisition  of 
a  rec(»d  pertaining  to  an  individual  un¬ 
der  false  pretenses  is  a  criminal  offense 
under  the  Act  subject  to  a  $5,000  fine. 

(ii)  Except  as  provided  in  paragrai^ 
(b)  (2)  (v)  of  this  section,  an  individual 
wdio  does  not  make  a  request  in  person 
shall  submit  a  imtarlzed  request  to  the 
responsible  Department  official  to  verify 
his  identity  or  shall  certify  in  his  re¬ 
quest  that  he  is  the  individual  who  he 
claims  to  be  and  that  he  understands 
that  the  knowing  and  willful  request  for 
or  acquisition  of  a  record  pertaining  to 
an  individual  under  false  pretenses  is  a 
criminal  offense  under  the  Act  subject 
to  a  $5,000  fine. 

(iii)  An  individual  who  makes  a  re¬ 
quest  on  behalf  of  a  minor  or  legal  in¬ 
competent  as  authorized  under  S  5b.l0 
of  tl^  Part  shall  verify  his  ndationshlp 
to  the  minor  or  legal  incompetent,  in 
addition  to  verifying  his  own  Identity, 
by  providing  a  copy  of  the  minor’s  birth 
certificate,  a  court  order,  or  other  com¬ 
petent  evidence  of  guardianship  to  the 
responsible  Department  official;  except 
that,  an  individual  is  not  required  to 
verify  his  relationship  to  the  minor  or 
legal  Incompetent  when  he  is  not  re¬ 
quired  to  verify  his  own  identity  or  when 
evidence  of  his  relationship  to  the  minor 
or  legal  Incompetent  has  been  previous¬ 
ly  given  to  the  responsible  Department 
official. 

(iv)  An  Individual  shall  further  verify 
his  identity  if  he  is  requesting  notifica¬ 
tion  of  or  access  to  sensitive  records 
such  as  medical  records.  Any  further 
verification  shall  parallel  the  record  to 
which  notification  or  access  is  being 
sought.  Such  further  verification  may 
Include  such  particulars  as  the  Indivld- 
ual’s  years  of  attendance  at  a  particular 
educational  institution,  rank  attained  in 
the  uniformed  services,  date  or  place  of 
birth,  names  of  parents,  an  occupation 
or  the  specific  times  the  Individual  re¬ 
ceived  medical  treatment. 

(V)  An  individual  who  makes  a  re¬ 
quest  by  telephone  shall  verify  his  iden¬ 
tity  by  providing  to  Uie  responsible  De¬ 
partment  official  identifying  particulars 
which  parallel  the  record  to  which  no¬ 
tification  or  access  is  being  sought.  If 
the  responsible  Department  official  de¬ 
termines  that  the  particulars  provided 
by  telephone  are  in  sufficient,  the  re¬ 
quester  will  be  required  to  submit  the 
request  in  writing  or  in  person.  Ttie- 
phone  requests  will  not  be  accepted 
where  an  individual  is  requesting  notifi¬ 
cation  of  or  access  to  sensitive  records 
such  as  medical  records. 

(c)  Granting  notification  of  or  access 
to  a  record. 

(1)  Subject  to  the  provisions  govern¬ 
ing  medical  records  in  i  5b.6  of  this  imrt 
and  the  provisions  governing  exempt 
systems  in  1 5b.ll  of  this  part,  a  respon¬ 
sible  Department  official,  who  receives 
a  request  for  notification  of  or  access  to 
a  record  and,  if  required,  verification  of 
an  individual’s  identity,  will  review  the 
request  and  grant  notification  or  access 
to  a  record,  if  the  individual  request¬ 
ing  access  to  the  record  is  the  subject 
individual. 


(2)  If  the  responsible  Department 
official  determines  that  there  will  be  a 
delay  in  responding  to  a  request  because 
of  the  number  of  requests  being  proc¬ 
essed.  a  breakdown  of  equipment, 
shortage  of  personnel,  storage  (ff 
records  in  other  locations,  etc.,  he  will 
so  inform  the  individual  and  indicate 
when  notification  or  access  will  be 
granted. 

(3)  Primr  to  granting  notification  of  or 
access  to  a  record,  the  responsible  De¬ 
partment  official  may  at  his  discretion 
require  an  individual  making  a  request 
in  person  to  reduce  his  request  to  writ¬ 
ing  if  the  Individual  has  not  already  done 
so  at  the  time  the  request  is  made. 

§  51>.6  Special  procedures  for  notifica¬ 
tion  of  or  access  to  medical  records. 

(a)  Ocneral.  An  individual  in  general 
has  a  right  to  notification  of  or  access 
to  his  medical  records,  including  psy¬ 
chological  records,  as  well  as  to  other 
records  pertaining  to  him  maintained  by 
the  Deputment.  This  section  sets  forth 
special  procedures  as  permitted  by  the 
Act  for  notification  of  or  access  to  medi¬ 
cal  records,  including  a  special  proce¬ 
dure  for  notification  of  or  access  to 
medical  records  of  minors.  The  special 
procedures  set  forth  in  paragraph  (b) 
of  this  section  may  not  be  suitable  for 
use  by  every  component  of  the  Depart¬ 
ment  Therefore,  components  may  fol¬ 
low  the  paragraph  (b)  procedure  for 
notification  of  or  access  to  medical  rec¬ 
ords,  or  may  issue  regulations  estab¬ 
lishing  specif  procedures  for  such  pur¬ 
poses.  The  special  procedure  set  forth  in 
paragraidi  (c)  of  this  section  relating 
to  medical  records  of  minors  is 
mandatory. 

(b)  Medical  records  procedures — (1) 
Notification  of  or  access  to  medical 
records. 

(1)  Any  individual  may  request  noti¬ 
fication  of  or  access  to  a  medical  record 
pertaining  to  him.  Unless  the  individual 
is  a  parent  mr  guardian  requesting  notifi¬ 
cation  of  or  access  to  a  minor’s  medical 
record,  an  individual  shall  make  a  re¬ 
quest  for  a  medical  record  in  accordance 
with  this  section  and  the  proc^ures  in 
8  5b.5of  thisPart. 

(ii)  An  individual  who  requests  noti¬ 
fication  of  or  access  to  a  medical  record 
shall,  at  the  time  the  request  is  made, 
deslcmate  a  representative  in  writing. 
The  representative  may  be  a  physician, 
other  health  professional,  or  other  re¬ 
sponsible  individual,  who  would  be  Will¬ 
ie  to  review  the  record  and  inform  the 
subject  individual  of  its  contents  at  the 
representative’s  discretion. 

(2)  UtUbsation  of  the  designated  rep¬ 
resentative.  A  subject  individiial  will  be 
granted  direct  access  to  a  medical  record 
if  the  responsible  otBcial  determines  that 
direct  access  is  not  likely  to  have  an  ad¬ 
verse  effect  on  the  subject  individual.  If 
the  responsible  Department  official  be¬ 
lieves  that  he  is  not  qualified  to  deter¬ 
mine,  mr  if  be  does  determine,  that  direct 
access  to  the  subject  individual  is  likely 
to  have  an  adverse  effect  on  the  subject 
individual,  the  record  will  be  salt  to  the 


designated  representative.  The  subject 
individual  will  be  informed  in  writing 
that  the  record  has  been  sent. 

(c)  Medical  records  of  minors. — (1) 
Requests  by  minors;  notification  of  or 
access  to  medical  records  to  minors.  A 
minor  may  request  notification  of  or  ac¬ 
cess  to  a  medical  record  pertaining  to 
him  in  accordance  with  paragraph  (b)  of 
this  section. 

(2)  Requests  on  a  minor’s  behalf; 
notification  of  or  access  to  medical  rec¬ 
ords  to  an  individual  on  a  minor’s  behalf. 

(i)  In  order  to  protect  the  privacy  of 
a  minor,  a  parent  or  guardian,  authorized 
to  act  on  a  minor’s  behalf  as  provided  in 
8  5b.l0  of  this  part,  who  makes  a  request 
for  notffication  of  or  access  to  a  minor’s 
medical  record  will  not  be  given  direct 
notificaton  of  or  access  to  such  record. 

(ii)  A  parent  or  guardian  shall  make 
all  requests  for  notification  of  or  access 
to  a  minor’s  medical  record  in  accord¬ 
ance  with  this  paragraph  and  the  proce¬ 
dures  in  8  5b.5  of  this  part.  A  parent  or 
guardian  shall  at  the  time  he  makes  a 
request  designate  a  family  physician  or 
other  health  professional  (other  than  a 
family  member)  to  whom  the  record,  if 
any.  will  be  sent. 

(iii)  Where  a  medical  record  on  the 
minor  exists,  it  will  be  sent  to  the  physi¬ 
cian  or  health  professional  designated 
by  the  parent  or  guardian  in  all  cases. 
If  disclosing  of  the  record  would  consti¬ 
tute  an  invasion  of  the  minor’s  privacy, 
that  fact  will  be  brought  to  the  attention 
of  the  physician  or  health  professional  to 
whom  the  record  is  sent.  The  physician 
or  health  professional  will  be  asked  to 
consider  the  effect  that  disclosure  of  the 
record  to  the  parent  or  guardian  would 
have  on  the  minor  in  determining  wheth¬ 
er  the  minor’s  medical  record  should  be 
xnade  available  to  the  parent  or  guardian. 
Response  to  the  parent  or  guardian  mak¬ 
ing  the  request  will  be  made  in  substan¬ 
tially  the  following  form: 

We  have  completed  proceesing  your  re¬ 
quest  for  notification  of  or  access  to 


medical  records.  Please  be  Informed  that  If 
any  medical  records  were  found  pertaining 
to  that  Individual,  they  have  not  been  sent 
to  your  designated  phjrslclan  or  health 
professional. 

In  each  case  where  a  minor’s  medical 
records  is  sent  to  a  physician  or  health 
professional,  reasonable  efforts  will  be 
made  to  so  inform  the  minor. 

§  5b.7  Procedures  for  correction  or 
anaendment  of  reciwds, 

(a)  Any  subject  individual  may  re¬ 
quest  that  his  record  be  corrected  or 
amended  if  he  believes  that  the  record 
is  not  accurate,  timely,  complete,  or  rele¬ 
vant  or  necessary  to  accomplish  a  De¬ 
partment  function.  A  subject  individual 
making  a  request  to  amend  or  correct 
his  reccHTd  shah  address  his  request  to 
the  responsible  Daxutment  official  in 
writing;  except  that,  the  request  need 
not  be  in  writing  if  the  subject  individual 
makes  his  request  in  poaon  and  the  re¬ 
sponsible  Department  official  corrects  or 
amends  the  record  at  that  time.  The  sub- 
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ject  individual  shall  specify  in  each 
requ^t; 

(1)  The  system  of  records  from  which 
the  record  is  retrieved: 

(2)  The  particular  record  which  he  is 
seeking  to  correct  or  amend; 

(3)  Whether  he  is  seeking  an  addition 
to  or  a  deletion  or  substitution  of  the 
record;  and, 

(4)  His  reasons  for  requesting  correc¬ 
tion  or  amendment  of  the  record. 

(b)  A  request  for  correction  or  amend¬ 
ment  of  a  record  will  be  acknowledged 
within  10  working  days  (rf  its  receipt  un¬ 
less  the  request  can  be  processed  and  the 
subject  individual  informed  of  the  re¬ 
sponsible  Department  official’s  decision 
on  the  request  within  that  10  day  period. 

(c)  If  the  responsible  Department  offi¬ 
cial  agrees  that  the  record  is  not  accu¬ 
rate.  timely,  or  complete  based  on  a  pre¬ 
ponderance  of  the  evidence,  the  record 
will  be  corrected  or  amended.  The  record 
will  be  deleted  without  regard  to  its  ac¬ 
curacy,  if  the  record  is  not  relevant  or 
necessary  to  accomplish  the  Department 
fimction  for  which  the  record  was  pro¬ 
vided  or  is  maintained.  In  either  case, 
the  subject  individual  will  be  informed 
in  writing  of  the  correction,  amendment, 
or  deletion  and,  if  accounting  was  made 
of  prior  disclosures  of  the  record,  all 
previous  recipients  of  the  record  will  be 
informed  of  the  corrective  action  taken. 

(d)  If  the  responsible  Department  offi¬ 
cial  does  not  agree  that  the  record  should 
be  corrected  or  amended,  the  subject  in¬ 
dividual  will  be  informed  in  writing  of 
the  refusal  to  correct  or  amend  the  rec¬ 
ord.  He  will  also  be  informed  that  he 
may  appeal  the  refusal  to  correct  or 
amend  his  record  to  the  appropriate  ap¬ 
peal  authority  listed  in  §  5b.8  of  this  Part. 
The  appropriate  appeal  authority  will  be 
identified  to  the  subject  individxial  by 
name,  title,  and  business  address. 

(e)  Requests  to  correct  or  amend  a 
record  governed  by  the  regulation  of  an¬ 
other  government  agency,  e.g..  Civil  Serv¬ 
ice  Commission,  Federal  Bureau  of  In¬ 
vestigation,  will  be  forwarded  to  such 
government  agency  for  processing  and 
the  subject  individual  will  be  informed 
in  writing  of  the  referral. 

§  5b.8  Appeals  of  refusals  to  correct  or 
amend  records. 

(a)  Processing  the  appeal.  (1)  A  sub¬ 
ject  individual  who  disagrees  with  a  re¬ 
fusal  to  correct  or  amend  his  record  may 
appeal  the  refusal  in  writing.  All  appeals 
shall  be  made  to  the  following  appeal  au¬ 
thorities,  or  their  designees,  or  successors 
in  function: 

(i)  Assistant  Secretary  for  Adminis¬ 
tration  and  Management  for  records  of 
the  Office  of  the  Secretary,  or  where  the 
initial  refusal  to  correct  or  amend  was 
made  by  another  api>eal  authority.  The 
appeal  authority  for  an  initial  refusal  by 
the  Assistant  Secretary  for  Administra¬ 
tion  and  Management  is  the  Under  Sec¬ 
retary. 

(ii)  Assistant  Secretary  for  Health  for 
records  of  the  Public  Health  Service  in¬ 
cluding  Office  of  Assistant  Secretary  for 
Health;  Health  Resources  Administra¬ 
tion;  Health  Services  Administration; 
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Alcohol,  Drug  Abuse,  and  Mental  Health 
Administration;  Center  for  Disease  Con¬ 
trol;  National  Institutes  of  Health;  and 
Food  and  Drug  Administration. 

(iii)  Assistant  Secretary  for  Education 
for  records  of  the  Office  of  the  Assistant 
Secretary  for  Education,  National  Cen¬ 
ter  for  Education  Statistics,  National  In¬ 
stitute  of  Education,  and  Office  of  Edu¬ 
cation. 

(iv)  Assisant  Secretary  for  Human  De¬ 
velopment  for  records  of  the  Office  of 
Human  Development. 

(V)  Commissioner  of  Social  Security 
for  records  of  the  Social  Security  Ad¬ 
ministration. 

(vi)  Administrator,  Social  and  Re¬ 
habilitation  Service  for  the  records  of 
the  Social  and  Rehabilitation  Service. 

(2)  An  appeal  will  completed  within 
30  working  days  from  its  receipt  by  the 
appeal  authority;  except  that,  the  appeal 
authority  may  for  good  cause  extend  this 
period  for  an  additional  30  days.  Should 
the  appeal  period  be  extended,  the  sub¬ 
ject  individual  appealing  the  refusal  to 
correct  or  amend  the  record  will  be  in¬ 
formed  in  writing  of  the  extension  and 
the.  circumstances  of  the  delay.  The  sub¬ 
ject  individual’s  request  to  amend  or 
correct  the  record,  the  responsible  De¬ 
partment  official’s  refusal  to  correct  or 
amend,  and  any  other  pertinent  mate¬ 
rial  relating  to  the  appeal  will  be  re¬ 
viewed.  No  hearing  will  be  held. 

(3)  If  the  appeal  authority  agrees 
that  the  record  subject  to  the  appeal 
should  be  corrected  or  amended,  the  rec¬ 
ord  will  be  amended  and  the  subject  in¬ 
dividual  will  be  informed  in  writing  of 
the  correction  or  amendment.  Where  an 
accounting  was  made  of  prior  disclosures 
of  the  record,  all  previous  recipients  of 
the  record  will  be  informed  of  the  cor¬ 
rective  action  taken. 

(4)  If  the  appeal  is  denied,  the  sub¬ 
ject  individual  will  be  informed  in 
writing: 

(i)  of  the  denial  and  the  reasons  for 
the  denial; 

(ii)  that  he  has  a  right  to  seek  judicial 
review  of  the  denial;  and, 

(iii)  that  he  may  submit  to  the  re¬ 
sponsible  Department  official  a  concise 
statement  of  disagreement  to  be  asso¬ 
ciated  with  the  disputed  record  and  dis¬ 
closed  whenever  the  record  is  disclosed. 

(b)  Notation  and  disclosure  of  dis~ 
puted  records.  Whenever  a  subject 
individual  submits  a  statement  of  dis¬ 
agreement  to  the  responsible  Depart¬ 
ment  official  in  accordance  with  para¬ 
graph  (a)  (4)  (iii)  of  this  section,  the 
record  will  be  noted  to  indicate  that  it 
is  disputed.  In  any  subsequent  disclosure, 
a  copy  of  the  subject  individual’s  state¬ 
ment  of  disagreement,  will  be  disclosed 
with  the  record.  If  the  responsible  De¬ 
partment  official  deems  it  appropriate, 
a  concise  statement  of  the  appeal  au¬ 
thority’s  reasons  for  denying  the  subject 
individual’s  .appeal  may  also  be  dis¬ 
closed  with  the  record.  While  the  sub¬ 
ject  individual  will  have  access  to  this 
statement  of  reasons,  such  statement 
will  not  be  subject  to  correction  or 
amendment.  Where  an  accounting  was 
made  of  prior  disclosures  of  the  record. 


all  previous  recipients  of  the  record  will 
be  provided  a  copy  of  the  subject  individ¬ 
ual’s  statement  of  disagreement,  as  well 
as  Uie  statement,  if  any,  of  the  appeal 
authority’s  reasons  for  denying  the  sub¬ 
ject  individual’s  appeal. 

§  5b.9  Disclosure  of  records. 

(a)  Consent  to  disclosure  by  a  sub¬ 
ject  individual. 

(1)  Except  as  provided  in  paragraph 
(b)  of  this  section  authorizing  disclo¬ 
sures  of  records  without  consent,  no  dis¬ 
closure  of  a  record  will  be  made  without 
the  consent  of  the  subject  individual.  In 
each  case  the  consent,  whether  obtained 
from  the  subject  individual  at  the  re¬ 
quest  of  the  Department  or  whether 
provided  to  the  Department  by  the  sub¬ 
ject  individual  on  his  own  initiative, 
shall  be  in  writing.  The  consent  shall 
specify  the  individual,  organizational 
unit  or  class  of  individuals  or  organiza¬ 
tional  units  to  whom  the  record  may  be 
disclosed,  which  record  may  be  disclosed 
and,  where  applicable,  during  which  time 
frame  the  record  may  be  disclosed  (e.g., 
during  the  school  year,  while  the  subject 
individual  is  out  of  the  country,  when¬ 
ever  the  subject  individual  is  receiving 
specific  services).  A  blanket  consent  to 
disclose  all  of  a  subject  individual’s 
records  to  unspecified  individuals  or 
organizational  units  will  not  be  hmiored. 
The  subject  individual’s  identity  and, 
where  applicable' (e,0.,  where  a  subject 
individual  gives  consent  to  disclosure  of  a 
record  to  a  specific  individual) ,  the  iden¬ 
tity  of  the  individual  to  whom  the  record 
is  to  be  disclosed  shall  be  verified. 

(2)  A  parent  or  guardian  of  any  minor 
is  not  authorized  to  give  consent  to  a  dis¬ 
closure  of  the  minor’s  medical  record. 

(b)  Disclosures  vHthout  the  consent  of 
the  subject  individual. 

The  disclosures  listed  in  this  para¬ 
graph  may  be  made  without  the  consent 
of  the  subject  individual.  Such  disclo¬ 
sures  are: 

(1)  To  those  officers  and  onployees  of 
the  Department  who  have  a  need  for  the 
record  in  the  performance  of  their  duties. 
The  responsible  Department  official  may 
upon  request  of  any  officer  or  employee, 
or  on  his  own  initiative,  determine  what 
constitutes  legitimate  need. 

(2)  Required  to  be  disclosed  under  the 
Freedom  of  Information  Act,  5  U.S.C. 
552,  and  Part  5  of  this  title. 

(3)  For  a  routine  use  as  defined  in 
paragraph  (j)  of  §  5b.l  of  this  Part. 
Routine  uses  will  be  listed  in  any  notice 
of  a  syston  of  records.  Routine  uses 
published  in  Appendix  B  are  applicable 
to  more  than  one  system  of  records. 
Where  applicable,  notices  of  systems  of 
records  may  contain  references  to  the 
routine  uses  listed  in  Appendix  B.  Ap¬ 
pendix  B  will  be  published  with  any 
comp^dium  of  notices  of  systems  of 
records. 

(4)  To  the  Bureau  of  the  Caisus  for 
purposes  of  planning  or  carrying  out  a 
census  or  survey  or  related  activity  pur¬ 
suant  to  the  provisions  of  title  13  UB.C. 

(5)  To  a  recipient  who  has  provided 
the  agency  with  advance  written  assur¬ 
ance  that  the  record  will  be  used  solely 
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as  a  statistical  research  or  reporting 
record;  Provided,  That,  the  record  is 
transferred  in  a  form  that  does  not  iden¬ 
tify  the  subject  individual. 

(6)  To  the  National  Archives  of  the 
United  States  as  a  record  which  has 
sufficient  historical  or  other  value  to 
warrant  its  continued  preservation  by 
the  United  States  Government,  or  for 
evaluation  by  the  Administrator  of  Gen¬ 
eral  Services  or  his  designee  to  deter¬ 
mine  whether  the  record  has  such  value. 

(7)  To  another  government  agoicy  or 
to  an  instrumentality  of  any  govern¬ 
mental  Jursidiction  within  or  imder  the 
control  of  the  United  States  for  a  civil  or 
criminal  law  enforcement  activity  if  the 
activity  is  authorized  by  law,  and  if  the 
head  of  such  government  agency  or  in¬ 
strumentality  has  submitted  a  written 
request  to  the  Department  specifying 
the  record  desired  and  the  law  enforce¬ 
ment  activity  for  which  the  record  is 
sought. 

(8)  To  an  Individual  pursuant  to  a 
showing  of  compelling  circumstances  af¬ 
fecting  the  health  or  safety  of  any  indi¬ 
vidual  if  a  notice  of  the  disclosing  is 
transmitted  to  the  last  known  address  of 
the  subject  individual. 

(9)  To  either  House  of  Congress,  or  to 
the  extent  of  matter  within  its  jurisdic¬ 
tion,  any  committee  or  subcommittee 
thereof,  any  joint  committee  of  Congress 
or  subcommittee  of  any  such  joint 
committee. 

(10)  To  the  Comptroller  General,  or 
any  of  his  authorized  representatives, 
in  the  course  of  the  performance  of  the 
duties  of  the  General  Accounting  Office. 

(11)  Pursuant  to  the  order  of  a  court 
of  competent  jurisdiction. 

(c)  Accounting  of  disclosures.  (1)  An 
accounting  of  all  disclosures  of.  a  record 
will  be  made  and  maintained  by  the  De¬ 
partment  for  5  years  or  for  the  life  of  the 
record,  whichever  is  longer:  except  that, 
such  ^  accounting  will  not  be  made: 

(1)  for  disclosures  imder  paragraph 
(b)  (1)  and  (2)  of  this  section;  and, 

(ii)  for  disclosures  made  with  the  writ¬ 
ten  consent  of  the  subject  individual. 

(2)  The  accounting  will  include: 

(i)  the  date,  nature,  and  purpose  of 
each  disclosure;  and 

(ii)  the  name  and  address  of  the  per¬ 
son  or  entity  to  whom  the  disclosure  is 
made. 

(3)  Any  subject  individual  may  re¬ 
quest  access  to  an  accounting  of  dis¬ 
closures  of  a  record.  The  subject  indi¬ 
vidual  shall  make  a  request  for  access  to 
an  accounting  in  accordance  with  the 
procedures  in  S  5b.5  of  this  part.  A  sub¬ 
ject  individual  will  be  granted  access  to 
an  accounting  of  the  disclosures  of  a 
record  in  accordance  with  the  proce¬ 
dures  of  this  part  which  govern  access 
to  the  related  record.  Access  to  an  ac¬ 
counting  of  a  disclosure  of  a  record  made 
under  paragraph  (b)  (7)  of  this  section 
may  be  granted  at  the  discretion  of  the 
responsible  Department  official. 

§  5b.l0  Parents  and  guardians. 

For  the  purpose  of  this  part,  a  parent 
or  guardian  of  any  minor  or  the  legal 
guardian  or  any  individual  who  has  been 


declared  incompetent  due  to  idiyslcal  or 
mental  incapacity  or  age  by  a  court  of 
competent  Jurisdiction  is  authorized  to 
act  on  behalf  of  an  individual  or  a  sub¬ 
ject  individual.  Except  as  provided  in 
paragraph  (b)  (2)  of  §  5b.5,  of  this.  Part 
governing  procedures  for  verif3dng  an 
individual’s  identity,  and  paragrafrii  (c) 

(2)  of  §  5b.6  of  this  part  governing  spe¬ 
cial  procedures  for  notification  of  or  ac¬ 
cess  to  a  minor’s  medical  records,  an 
Individual  auUiorized  to  act  on  behalf  of 
a  minor  or  legal  incompetent  will  be 
viewed  as  if  he  were  the  individual  or 
subject  individual. 

§  5b.  11  Exempt  systems. 

(a)  General  policy.  The  Act  permits 
certain  tsrpes  of  specific  systems  of  rec¬ 
ords  to  be  exempt  from  some  of  its  re¬ 
quirements.  It  is  the  policy  of  the  De¬ 
partment  to  exercise  authority  to  exempt 
systems  of  records  only  in  compelli^ 
cases. 

(b)  Specific  systems  of  records  ex¬ 
empted.  (1)  Those  systems  of  records 
list^  in  paragraph  (b)  (2)  of  this  sec¬ 
tion  are  exempt  from  the  following  pro¬ 
visions  of  the  Act  and  this  Part: 

(i)  5  U.S.C.  552a(c)  (3)  and  paragraph 
(c)  (2)  of  S  5b.9  of  this  part  which  re¬ 
quire  a  subject  individual  to  be  granted 
access  to  an  accounting  of  disclosures  of 
a  record. 

(ii)  5  U.S.C.  552a(d)  (1)  through  (4) 
and  (f)  and  !S  5b.6.  5b.7,  and  5b.8  of  this 
part  relating  to  notification  of  or  access 
to  records  and  correction  or  amendment 
of  records. 

(ill)  5  n.s.c.  552a(e)  (4)  (G)  and  (H) 
which  require  inclusion  of  information 
about  Department  procedures  for  notifi¬ 
cation,  access,  and  correction  or  amend¬ 
ment  of  records  In  the  notice  for  the 
systems  of  records.  ' 

(iv)  5  UjS.C.  552(e)(3)  and  para¬ 
graph  (a)  (3)  of  §  5b.4  of  this  Part  which 
require  that  an  individual  asked  to  furo- 
vide  a  record  to  the  Department  be  in¬ 
formed  of  the  author!^  for  providing 
the  record  (includmg  whether  the  pro¬ 
viding  of  the  record  is  mandatory  or 
voluntary,  the  principal  purposes  for 
maintaining  the  record,  the  routine  uses 
for  the  record,  and  what  effect  his  re¬ 
fusal  to  provide  the  record  may  have  on 
him),  and  if  the  record  is  not  required 
by  statute  or  Ebcecutlve  Order  to  be  pro¬ 
vided  by  the  individual,  he  agrees  to  pro¬ 
vide  the  record.  This  exonption  ai^lies 
only  to  an  Investigatory  record  compiled 
by  the  Department  for  criminal  law  en¬ 
forcement  purposes  in  a  system  of  rec¬ 
ords  ex^pt  under  subsection  (j)  (2)  of 
the  Act  to  the  extent  that  these  require- 
moits  would  prejudice  the  conduct  of 
the  investigation. 

(2)  The  following  systems  of  records 
are  exempt  from  those  provisions  of  the 
Act  and  this  part  listed  in  paragrai^  (b) 
(1)  of  this  section. 

(1)  Pursuant  to  subsection  (j)  (2)  of 
the  Act: 

(A)  the  Saint  Elizabeths  Hospital’s 
Court-Ordered  Forensic  Investigatory 
Materials  Files;  and 

(B)  the  Investi^tory  Material  Com¬ 
piled  for  Law  Enforcement  Purposes 
System.  HEW. 


(ii)  Pursuant  to  subsection  (k)  (2)  of 
the  Act: 

(A)  the  General  CMmlnal  Investiga- 
Uon  FUes,  HEW/SSA; 

(B)  the  Criminal  Investigations  File, 
HEW/SSA;  and, 

(C)  the  Program  Integrity  Case  Files, 
HEW/SSA. 

(ill)  Pursuant  to  subsection  (k)  (4)  of 
the  Act: 

(A)  the  Health  and  Demographic  Sur¬ 

veys  Conduct  in  Random  Samples  of  the 
U.S.  Population;  *■ 

(B)  ^e  Health  Manpower  Inventories 
and  Surveys; 

(C)  the  Vital  Statistics  for  Births. 
Deaths,  Fetal  Deaths,  Marriages  and  Di¬ 
vorces  Occurring  in  the  U.S.  during  Each 
Year;  and. 

(D)  the  Maryland  Psychiatric  COse 
Register. 

(iv)  Pursuant  to  subsection  (k)  (5)  of 
the  Act: 

(A)  the  Investigatory  Material  Com¬ 
piled  for  Security  and  Suitability  Pur¬ 
poses  System,  HEW;  and. 

(B)  the  Suitability  for  Employment 
Records.  HEW. 

(V)  Pursuant  to  subsections  (j)(2). 
(k)  (2),  and  (k)  (5)  of  the  Act: 

(A)  the  Clinical  Investigatory  Rec¬ 
ords.  HEW /FDA; 

(B)  the  Regulated  Industry  Employee 
Enforcement  Records,  HEW /FDA; 

(C)  the  Employee  Conduct  Investiga¬ 
tive  Records,  HEW /FDA;  and, 

(D)  the  Service  Contractor  Employee 
Investigative  Records,  HEW /FDA. 

(c)  Notification  of  or  access  to  records 
in  exempt  systems  of  records. 

(1)  Where  a  system  of  records  is  ex¬ 
empt  as  provided  in  paragraph  (b)  of 
this  section,  any  individual  may  none¬ 
theless  request  notification  of  or  access 
to  a  record  in  that  s3rstem.  An  individual 
shall  make  requests  for  notification  of  or 
access  to  a  record  in  an  exempt  system 
of  records  in  accordance  with  the  pro¬ 
cedures  of  §S  5b.5  and  5b.6  of  this  part. 

(2)  An  individual  will  be  granted  no¬ 
tification  of  or  access  to  a  record  in  an 
exempt  system  but  only  to  the  extent 
such  notification  or  access  would  not  re¬ 
veal  the  identity  of  a  source  who  fur¬ 
nished  the  record  to  the  Department  un¬ 
der  an  express  prinnlse,  and  prior  to  Sep¬ 
tember  27,  1975  an  implied  promise,  that 
his  identify  would  be  held  in  confidence, 
if: 

(i)  The  record  is  in  a  system  of  rec¬ 
ords  which  is  exempt  under  subsection 
(k)  (2)  of  the  Act  and  the  individual  has 
been,  as  a  result  of  the  maintenance  of 
the  record,  denied  a  right,  privilege,  or 
benefit  to  which  he  would  otherwise  be 
eligible;  or. 

(li)  The  record  is  in  a  system  of  rec¬ 
ords  which  is  exempt  under  subsection 
(k)  (5)  of  the  Act. 

(3)  If  an  individual  is  not  granted  no¬ 
tification  of  or  access  to  a  record  in  a 
syston  of  records  exempt  under  subsec¬ 
tions  (k)  (2)  and  (5)  of  the  Act  in  ac¬ 
cordance  with  this  paragraph,  he  will  be 
informed  that  the  identity  of  a  confiden¬ 
tial  source  would  be  revealed  If  notifica¬ 
tion  of  or  access  to  the  record  were 
granted  to  him. 
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(d)  Discretionary  actions  by  the  re¬ 
sponsible  Department  official.  Unless  dis¬ 
closure  of  a  record  to  the  general  public 
is  otherwise  prohibited  by  law,  the  re¬ 
sponsible  Department  ofiacial  may  in  his 
discretion  grant  notification  of  or  access 
to  a  record  in  a  system  of  records  which 
is  exempt  under  paragraph  (b)  of  this 
section.  Discretionary  notification  of  or 
access  to  a  record  in  accordance  with 
this  paragraph  will  not  be  a  precedent 
for  discretionary  notification  of  or  ac¬ 
cess  to  a  similar  or  related  record  and 
will  not  obligate  the  responsible  Depart¬ 
ment  official  to  exercise  his  discretion  to 
grant  notification  of  or  access  to  any 
other  record  in  a  system  of  records  which 
is  exempt  under  paragraph  (b)  of  this 
section. 

§  5b.l2  Contractors. 

(a)  All  contracts  entered  into  on  or 
after  September  27,  1975  which  require 
a  contractor  to  maintain  or  on  behalf  of 
the  Department  to  maintain,  a  system 
of  records  to  accomplish  a  Department 
function  must  contain  a  provision  requir¬ 
ing  the  contractor  to  comply  with  the 
Act  and  this  part. 

(b)  All  unexpired  contracts  entered 
into  prior  to  September  27,  1975  which 
require  the  contractor  to  maintain  or  on 
behalf  of  the  Department  to  maintain, 
a  system  of  records  to  accomplish  a  De¬ 
partment  function  will  be  amended  as 
soon  as  practicable  to  include  a  provision 
requiring  the  contractor  to  comply  with 
the  Act  and  this  Part.  All  such  contracts 
must  be  so  amended  by  July  1, 1976  un¬ 
less  tor  good  cause  the  appeal  authority 
identified  in  §  5b.8  of  this  part  authorizes 
the  continuation  of  the  contract  without 
amendment  beyond  that  date. 

(c)  A  contractor  and  any  employee  of 
such  contractor  shall  be  considered  em-. 
ployees  of  the  Department  only  for  the 
purposes  of  the  criminal  penalties  of  the 
Act,  5  U.S.C.  552a  (i) ,  and  the  employee 
standards  of  conduct  listed  in  Appendix 
A  of  this  part  where  the  contract  con¬ 
tains  a  provision  requiring  the  contractor 
to  comply  with  the  Act  and  this  part. 

(d)  This  section  does  not  apply  to  sys¬ 
tems  of  records  maintained  by  a  con¬ 
tractor  as  a  result  of  his  management 
discretion,  e.g.,  the  contractor’s  person¬ 
nel  records. 

§  5b.l3  Fees. 

(a)  Policy.  Where  applicable,  fees  for 
copying  records  will  be  charged  in  ac¬ 
cordance  with  the  schedule  set  forth  in 
this  section.  Pees  may  only  be  charged 
where  an  individual  requests  that  a  copy 
be  made  of  the  record  to  which  he  is 
granted  access.  No  fee  may  be  charged 
for  making  a  search  of  the  system  of  rec¬ 
ords  whether  the  search  is  manual,  me¬ 
chanical,  or  electronic.  Where  a  copy  of 
the  record  must  be  made  in  order  to  pro¬ 
vide  access  to  the  record  (e.g.,  computer 
printout  where  no  screen  reading  is  avail¬ 
able)  ,  the  copy  will  be  made  available  to 
the  individual  without  cost.  Where  a 
medical  record  is  made  available  to  a 
representative  designated  by  the  individ¬ 
ual  or  to  a  physician  or  health  profes¬ 
sional  designated  by  a  parent  or  guardian 
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under  §  5b.6  of  this  Part,  no  fee  will  be 
charged. 

(b)  Fee  schedule.  The  fee  schedule  for 
the  Department  is  as  follows: 

(1)  Copying  of  records  susceptible  to 
photocopying — $.10  per  page. 

(2)  Cop3dng  records  not  susceptible  to 
photocopying  (e.g.,  punch  cards  or  mag¬ 
netic  tapes) — at  actual  cost  to  be  deter¬ 
mined  on  a  case-by-case  basis. 

(3)  No  charge  will  be  made  if  the  total 
amoimt  of  copying  does  not  exceed  $25. 

Appendix  A 

EMPLOYEE  STANDARDS  OF  CONDITCT 

(a)  General.  All  employees  are  required 
to  be  aware  of  their  responsibilities  under 
the  Privacy  Act  of  1974,  5  U.S.C.  652a. 
Regulations  Implementing  the  Act  are 
set  forth  in  45  CPR  5b.  Instruction 
on  the  requirements  of  the  Act  and  regula¬ 
tion  shall  be  provided  to  all  new  employees 
of  the  Department.  In  addition,  supervisors 
shall  be  responsible  for  assuring  that  em¬ 
ployees  who  are  working  with  systems  of 
records  or  who  undertake  new  duties  which 
require  the  use  of  systems  of  records 
are  informed  of  their  re<=ponsiblllties. 
Supervisors  shall  also  be  responsible  for  as¬ 
suring  that  all  employees  who  work  with 
such  systems  of  records  are  periodicaUy 
reminded  of  the  requirements  of  the  Act  and 
are  advised  of  any  new  provisions  or  inter¬ 
pretations  of  the  Act. 

(b)  Penalties.  (1)  All  employees  must 
guard  against  improper  disclosure  of  records 
which  are  governed  by  the  Act.  Because  of 
the  serious  consequences  of  Improper  inva¬ 
sions  of  personal  privacy,  employees  may  be 
subject  to  disciplinary  action  and  criminal 
prosecution  for  knowing  and  willful  viola¬ 
tions  of  the  Act  and  regulation.  In  addition, 
employees  may  also  be  subject  to  disciplinary 
action  for  unknowing  or  unwillful  violations, 
where  the  employee  had  notice  of  the  provi¬ 
sions  of  the  Act  and  regulations  and  failed  to 
Inform  himself  sufficiently  or  to  conduct 
himself  in  accordance  with  the  requirements 
to  avoid  violations. 

(2)  The  Department  may  be  subjected  to 
civil  liability  for  the  following  actions  un¬ 
dertaken  by  its  employees; 

(a)  Making  a  determination  under  the 
Act  and  section  5b  .7  and  5b  .8  of  the  regula¬ 
tion  not  to  amend  an  individual’s  record  in 
accordance  with  his  request,  or  falling  to 
make  such  review  in  conformity  with  those 
provisions; 

(b)  Refusing  to  comply  with  an  individ¬ 
ual's  request  for  notification  of  or  access  to  a 
record  pertaining  to  him; 

(c)  Falling  to  maintain  any  record  per¬ 
taining  to  any  individual  with  such  accuracy, 
relevance,  timeliness,  and  completeness  as  is 
necessary  to  assure  fairness  in  any  determi¬ 
nation  relating  to  the  qualifications,  charac¬ 
ter,  rights,  or  opportunities  of,  or  benefits  to 
the  Individual  that  may  be  made  on  the  basis 
of  such  a  record,  and  consequently  a  deter¬ 
mination  is  made  which  is  adverse  to  the  in¬ 
dividual;  or 

<d)  Failing  to  comply  with  any  other  pro¬ 
vision  of  the  Act  or  any  rule  promulgated 
thereunder,  in  such  a  way  as  to  have  an  ad¬ 
verse  effect  on  an  individual. 

(3)  "An  employee  may  be  personally  sub¬ 
ject  to  criminal  liability  as  set  forth  below 
and  in  5  U.S.C.  662a  (1) : 

(a)  Any  officer  or  employee  of  an  agency, 
who  by  virtue  of  his  employment  or  official 
position,  has  possession  of,  or  access  to, 
agency  records  which  contain  Individually 
identifiable  information  the  disclosure  of 
which  Is  prohibited  by  the  Act  or  by  rules  or 
regulations  established  thereunder,  and  who, 
knowing  that  disclosure  of  the  specific  mate¬ 


rial  is  so  prohibited,  willfully  discloses  the 
material  in  any  manner  to  any  person  of 
agency  not  entitled  to  receive  it,  shall  be 
guilty  of  a  misdemeanor  and  fined  not  more 
than  $5,000.” 

(b)  “Any  officer  or  employee  of  any  agency 
who  willfully  maintains  a  system  of  records 
without  meeting  the  notice  requirements 
[of  the  Act]  shall  be  guilty  of  a  misdemeanor 
and  fined  not  more  than  $5,000.” 

(c)  Rules  Governing  Employees  Not  Work¬ 
ing  With  Systems  of  Records.  Employees 
whose  duties  do  not  Involve  working  with 
systems  of  records  will  not  generally  disclose 
to  any  one,  without  specific  authorization 
from  their  supervisors,  records  pertaining  to 
employees  or  other  Individuals  which  by 
reason  of  1;heir  official  duties  are  available  to 
them.  Notwithstanding  the  above,  the  fol¬ 
lowing  records  concerning  Federal  employees 
are  a  matter  of  public  record  and  no  further 
authorization  is  necessary  for  disclosure: 

(1)  Name  and  title  of  individual.  ' 

(2)  Grade  classification  or  equivalent  and 
annual  rate  of  salary. 

(3)  Position  description. 

(4)  Location  of  duty  station.  Including 
ifiom  number  and  telephone  number. 

In  addition,  employees  shall  disclose 
records  which  are  listed  in  the  Department’s 
Freedom  of  Information  Regulation  as  being 
available  to  the  public.  Requests  for  other 
records  will  be  referred  to  the  responsible  De¬ 
partment  official.  This  does  not  preclude  em¬ 
ployees  from  discussing  matters  which  are 
known  to  them  personally,  and  without  re¬ 
sort  to  a  record,  to  official  investigators  of 
Federal  agencies  for  official  purposes  such  as 
suitability  checks.  Equal  Employment  Oppor¬ 
tunity  investigations,  adverse  action  pro¬ 
ceedings,  grievance  proceedings,  etc. 

(d)  Rules  governing  employees  whose 
duties  require  use  or  reference  to  systems  of 
records.  Employees  whose  official  duties  re¬ 
quire  that  they  refer  to,  maintain,  serv¬ 
ice,  or  otherwise  deal  with  systems  of  records 
(hereinafter  referred  to  as  “Systems  Em¬ 
ployees’*)  are  governed  by  the  general  pro¬ 
visions.  In  addition,  extra  precautions  are 
required  and  systems  employees  are  held  to 
higher  standards  of  conduct. 

(1)  Systems  Employees  shall; 

(a)  Be  Informed  with  respect  to  their 
responsibilities  under  the  Act; 

(b)  Be  alert  to  possible  misuses  of  the 
system  and  report  to  their  supervisors  any 
potential  or  actual  use  of  the  system  which 
they  believe  is  not  in  compliance  with  the 
Act  and  regulation; 

(c)  Make  a  disclosure  of  records  within 
the  Department  only  to  an  employee  who 
has  a  legitimate  need  to  know  the  record  in 
the  course  of  his  official  duties; 

(d)  Maintain  records  as  accurately  as 
practicable. 

(e)  Consult  with  a  supervisor  prior  to 
taking  any  action  where  they  are  in  doubt 
whether  such  action  is  in  conformance  with 
the  Act  and  regulation. 

(2)  Systems  Employees  shall  not; 

(a)  Disclose  in  any  form  records  from  a 
system  of  records  except  (1)  with  the  con¬ 
sent  or  at  the  request  of  the  subject  individ¬ 
ual;  or  (2)  where  its  disclosure  is  permitted 
under  |  5b  .9  of  the  regulation. 

(b)  Permit  unauthorized  individuals  to  be 
present  in  controlled  areas.  Any  unauthor¬ 
ized  individuals  observed  in  controlled  areas 
shall  be  reported  to  a  supervisor  or  to  the 
guard  force. 

(c)  Knowingly  or  willfully  take  action 
which  might  subject  the  Department  to  civil 
liability. 

(d)  Make  any  arrangements  for  the  design 
development,  or  operation  of  any  system  of 
records  without  making  reasonable  effort  to 
provide  that  the  system  can  be  maintained  in 
accordance  with  the  Act  and  regulation. 
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(e)  Contracting  officers.  In  addition  to  any 
applicable  provisions  set  forth  above,  those 
employees  whose  official  duties  Involve 
entering  into  contracts  on  behalf  of  the  De¬ 
partment  shall  also  be  governed  by  the  fol¬ 
lowing  provisions: 

(1)  Contracts  for  design,  or  development 
of  systems  and  equipment.  No  contract  for 
the  design  or  development  of  a  system  of 
records,  or  for  equipment  to  store,  service  or 
maintain  a  system  of  records  shall  be  entered 
into  unless  the  contracting  officer  has  made 
reasonable  effort  to  ensure  that  the  product 
to  be  purchased  Is  capable  of  being  used 
without  violation  of  the  Act  or  regulation. 
Special  attention  shall  be  given  to  provision 
of  physical  safeguards. 

(2)  Contracts  for  the  operation  of  systems 
of  records.  A  review  by  the  Contracting  Of¬ 
ficer.  in  conjunction  with  other  officials 
whom  he  feels  appropriate,  of  all  proposed 
contracts  providing  for  the  operation  of 
systems  of  records  shall  be  made  prior  to 
execution  of  the  contracts  to  determine 
whether  operation  of  the  system  of  records 
Is  for  the  purpose  of  accomplishing  a  Depart¬ 
ment  function.  If  a  determination  is  made 
that  the  operation  of  the  system  is  to  accom¬ 
plish  a  Department  function,  the  contracting 
officer  shall  be  responsible  for  including  in 
the  contract  appropriate  provisions  to  apply 
the  provisions  of  the  Act  and  regulatioi;!  to 
the  system,  including  prohibitions  against 
improper  release  by  the  contractor,  his  em¬ 
ployees,  agents,  or  subcontractors. 

(3)  Other  service  contracts.  Contracting 
officers  entering  Into  general  service  con¬ 
tracts  shall  be  responsible  for  determining 
the  appropriateness  of  including  provisions 
In  the  contract  to  prevent  potential  misuse 
(Inadvertent  or  otherwise)  by  employees, 
agents,  or  subcontractors  of  the  contractor. 

(f)  Rules  Governing  Responsible  Depart¬ 
ment  Officials.  In  addition  to  the  require¬ 
ments  for  Systems  Employees,  responsible 
Department  officials  shall: 

( 1 )  respond  to  all  requests  for  notification 
of  or  access,  disclosure,  or  amendment  of  rec¬ 
ords  in  a  timely  fashion  in  accordance  with 
the  Act  and  regulation; 

(2)  make  any  amendment  of  records  ac¬ 
curately  and  in  a  timely  fashion; 

(3)  Inform  all  persons  whom  the  account¬ 
ing  records  show  have  received  copies  of  the 
record  prior  to  the  amendments  of  the  cor¬ 
rection;  and 

(4)  associate  any  statement  of  disagree¬ 
ment  with  the  dteputed  record,  and 

(a)  transmit  a  copy  of  the  statement  to 
all  persons  \^om  the  accounting  records 
show  have, received  a  copy  of  the  disputed 
record,  and 


(b)  transmit  that  statement  with  any  fu¬ 
ture  disclosure. 

Appendix.  B 

ROUTINE  USES  APPLICABLE  TO  MORE  THAN  ONE 
SYSTEM  OF  RECORDS  MAINTAINED  BY  HEW 

(1)  In  the  event  that  a  system  of  records 
maintained  by  this  agency  or  carry  out  its 
functions  indicates  a  violation  or  potential 
violation  of  law,  whether  civil,  criminal  or 
regulatory  in  nature,  and  whether  arising  by 
general  statute  or  particular  program  statute, 
or  by  regulation,  rule  or  order  Issued  pur¬ 
suant  thereto,  the  relevant  records  in  the 
system  of  records  may  be  referred,  as  a  rou¬ 
tine  use,  to  the  appropriate  agency,  whether 
federal,  or  foreign,  charged  with  the  respon¬ 
sibility  of  Investigating  or  prosecuting  such 
violation  or  charged  with  enforcing  or  im¬ 
plementing  the  statute,  or  rule,  regulation  or 
order  issued  pursuant  thereto. 

(2)  Referrals  may  be  made  of  assignments 
of  research  investigators  and  project  mon¬ 
itors  to  .specific  research  projects  to  the 
Smithsonian  Institution  to  contribute  to  the 
Smithsonian  Science  Information  Exchange, 
Inc. 

(3)  In  the  event  the  Department  deems  it 
desirable  or  necessary.  In  determining 
whether  particular  records  are  required  to 
be  disclosed  under  the  Freedom  of  Informa¬ 
tion  Act,  disclosure  may  be  made  to  the  De¬ 
partment  of  Justice  for  the  purpose  of  ob¬ 
taining  its  advice. 

(4)  A  record  from  this  system  of  records 
may  be  disclosed  as  a  “routine  use”  to  a  fed¬ 
eral.  state  or  local  agency  maintaining  civil, 
criminal  or  other  relevant  enforcement  rec¬ 
ords  or  other,  pertinent  records,  such  as  cur¬ 
rent  licenses,  if  necessary  to  obtain  a  record 
relevant  to  an  agency  decision  concerning  the 
hirmg  or  retention  of  an  employee,  the  is¬ 
suance  of  a  security  clearance,  the  letting  of 
a  contract,*  or  the  Issuance  of  a  license,  grant 
or  other  benefit. 

A  record  from  this  system  of  records  may 
be  disclosed  to  a  federal  agency,  in  response 
to  its  request,  in  connection  with  the  hiring 
or  retention  of  an  employee,  the  issuance  of 
a  security  clearance,  the  reporting  of  an  in¬ 
vestigation  of  an  employee,  the  letting  of  a 
contract,  or  the  issuance  of  a  license,  grant, 
or  other  benefit  by  the  requesting  agency,  to 
the  extent  that  the  record  is  relevant  and 
necessary  to  the  requesting  agency’s  decision 
on  the  matter. 

(5)  In  the  event  that  a  system  of  records 
maintained  by  this  agency  to  carry  out  its 
function  indicates  a  violation  or  potential 
violation  of  law,  whether  civil,  criminal  or 
regulatory  in  nature,  and  whether  arising  by 
general  statute  or  particular  program  statute. 


or  by  regulation,  rule  or  order  issued  pursu¬ 
ant  thereto,  the  relevant  records  in  the  sys¬ 
tem  of  records  may  be  referred,  as  a  routine 
use,  to  the  appropriate  agency,  whether  state 
or  local  charged  with  the  responsibility  of  in¬ 
vestigating  or  prosecuting  such  violation  or 
charged  with  enforcing  or  implementing  the 
statute,  or  rule,  regulation  or  order  issued 
pursuant  thereto. 

(6)  Where  federal  agencies  having  -the 
power  to  subpoena  other  federal  agencies’ 
records,  such  as  the  Internal  Revenue  Service 
or  the  Civil  Rights  Commission,  issue  a  sub¬ 
poena  to  the  Department  for  records  in  this 
system  of  records,  the  Department  will  make 
such  records  available. 

(7)  Where  a  contract  between  a  component 
of  the  Department  and  a  labor  organization 
recognized  under  E.0. 11491  provides  that  the 
agency  will  disclose  personal  records  relevant 
to  the  organization’s  mission,  records  in  this 
system  of  records  may  be  disclosed  to  such 
organization. 

(8)  Where  the  appropriate  official  of  the 
Department,  pursuant  to  the  Department’s 
Freedom  of  Information  Regulation  deter¬ 
mines  that  it  is  in  the  public  Interest  to  dis¬ 
close  a  record  which  is  otherwise  exempt 
from  mandatory  disclosure,  disclosure  may 
be  made  from  this  system  of  records. 

(9)  The  Department  contemplates  that  it 
will  contract  with  a  private  firm  for  the  pur¬ 
pose  of  collating,  analyzing,  aggregating  or 
otherwise  refining  records  in  this  system. 
Relevant  records  will  be  disclosed  to  such 
a  contractor.  The  contractor  shall  be  required 
to  maintain  Privacy  Act  safeguards  with 
respect  to  such  records. 

(10) -(99)  (Reserved] 

(100)  To  the  Department  of  Justice  or 
other  appropriate  Federal  agencies  in  de¬ 
fending  claims  against  the  United  States 
when  the  claim  Is  based  upon  an  individual’s 
mental  or  physical  condition  and  is  alleged 
to  have  arisen  because  of  activities  of  the 
Public  Health  Service  in  connection  with 
such  Individual. 

(101)  To  individuals  and  organizations, 
deemed  qualified  by  the  Secretary  to  carry 
out  specific  research  solely  for  the  purpose  of 
carrying  out  such  research. 

(102)  To  organizations  deemed  qualified  by 
the  Secretary  to  carry  out  quality  assess¬ 
ment,  medical  audits  or  utilization  review. 

(103)  Disclosures  in  the  course  of  employee 
discipline  or  competence  determination  pro¬ 
ceedings. 

Appendix  C 

DELEGATIONS  OF  AUTHOBITT  [RESERVED] 
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